Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297b4a30-079d-3f70-91c8-94a8c309f4f6.roa
File:                     297b4a30-079d-3f70-91c8-94a8c309f4f6.roa (raw, json)
Hash identifier:          mkix5tq3iE5EJhZ0Cx6MIIQGdLxRR+WnD6Ylw6pn/Vc=
Subject key identifier:   16:3F:63:08:3B:63:ED:8F:0A:AF:95:C0:F5:66:AD:44:C9:55:C9:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A3CF629658822D2D018FBDC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297b4a30-079d-3f70-91c8-94a8c309f4f6.roa
Signing time:             Tue 23 Apr 2024 10:00:41 +0000
ROA not before:           Tue 23 Apr 2024 10:00:41 +0000
ROA not after:            Mon 22 Jul 2024 10:00:41 +0000
asID:                     16625
IP address blocks:        184.28.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a3:cf:62:96:58:82:2d:2d:01:8f:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 10:00:41 2024 GMT
            Not After : Jul 22 10:00:41 2024 GMT
        Subject: CN=fdd4a5c0-2447-4364-8f9f-47034f929ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5d:60:f3:7f:4e:c9:fc:61:e2:f4:ee:68:ab:
                    9b:f6:1a:c3:b3:a7:2a:11:29:4b:4b:86:b6:e4:b9:
                    44:2a:38:0c:c0:a5:42:c5:29:16:82:37:5f:c0:1d:
                    86:68:c8:56:08:a5:ae:ff:66:35:7b:94:f3:a0:63:
                    b5:bb:c4:53:94:c9:f2:5c:2a:04:6d:23:fc:31:8f:
                    5e:ba:1c:1e:c2:1c:dd:8a:7d:b6:a3:a3:7e:9a:1e:
                    51:ea:54:3e:35:28:b9:1e:36:48:77:e1:28:1b:a8:
                    00:6d:b6:b7:a3:0b:aa:84:74:fe:8c:f0:16:23:ab:
                    41:d5:6f:ad:fa:6b:d4:52:be:13:3d:d3:97:f7:49:
                    10:b3:43:f6:ca:a4:fa:59:38:93:e3:8c:66:80:ef:
                    19:ab:64:29:26:96:b5:52:56:a8:1c:98:57:75:64:
                    b8:0a:bb:29:00:72:94:8c:db:2d:01:8b:df:f1:fa:
                    d2:3a:55:7f:90:96:64:27:fb:c7:d4:93:e6:4f:ae:
                    ad:78:8b:47:1c:7a:e0:f9:81:e8:67:1b:12:07:c6:
                    d3:b0:49:4b:b7:0e:66:07:fe:d0:fc:2f:13:6c:b6:
                    ca:0f:68:f8:72:26:c0:21:d6:75:83:fc:70:76:f2:
                    da:cb:07:34:30:ce:ae:93:2c:08:c4:c8:eb:c1:50:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3F:63:08:3B:63:ED:8F:0A:AF:95:C0:F5:66:AD:44:C9:55:C9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297b4a30-079d-3f70-91c8-94a8c309f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:9a:6f:9d:a0:d9:26:0b:48:6f:24:80:8d:7b:95:37:40:
         1c:55:6b:fe:66:9c:e0:42:64:54:a5:d8:d7:a6:3f:de:6a:49:
         a0:4e:86:a5:2c:35:a2:53:0f:36:7e:1b:fa:92:29:ab:19:cf:
         58:3b:aa:65:2c:23:b2:93:7b:a2:20:8b:e5:a3:ed:8a:85:22:
         2e:d0:d2:9d:4d:99:a2:12:ca:a3:cc:dc:13:a4:eb:27:83:33:
         be:2d:b3:ca:c8:c3:81:7a:6a:24:1e:de:96:fe:a2:07:6f:f8:
         27:26:c0:05:b5:a7:fe:f7:19:a7:87:08:50:0a:f2:82:50:f6:
         d3:12:e1:76:05:a5:d2:6d:6f:b9:ac:a2:9f:80:b6:55:2c:df:
         ff:00:46:02:0b:e7:2e:cd:c0:54:4f:15:ea:7e:e6:cf:05:35:
         a3:29:e9:42:7d:eb:de:2b:d3:7e:c6:5d:0f:cf:85:fd:c0:3b:
         4a:83:49:8b:ec:c9:da:df:23:ac:5c:fd:a9:3b:f6:8f:92:e7:
         f3:62:bc:52:55:47:4b:f9:a7:fd:7c:5f:54:96:ea:a6:2e:97:
         a5:9a:38:19:e2:af:e6:a0:a5:ca:3a:3c:cb:c1:27:81:c1:84:
         76:23:37:92:85:93:9b:44:e2:85:3e:7d:75:df:5a:cb:8f:7e:
         6f:a6:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:07 2024 by rpki-client on console-fra.rpki-client.org