Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
File:                     89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa (raw, json)
Hash identifier:          Vs0HJF2WKs29R6WcXnQIBRgA5r6q4XWg4JJlzUvQHzc=
Subject key identifier:   3B:2B:67:B5:F6:2D:9A:0C:C3:F8:DC:6B:3C:EA:A1:65:B1:C4:B1:07
Certificate issuer:       /CN=ce029dcb-bb98-4569-a98c-6f77af488b38
Certificate serial:       010D0C9F4328584566BDB56705C755314D57ADD0
Authority key identifier: C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        192.149.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b5:67:05:c7:55:31:4d:57:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce029dcb-bb98-4569-a98c-6f77af488b38
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=285cb194-5249-4023-b717-ae8649e3c41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:ff:93:9a:c4:9d:a9:2f:de:e5:3e:d3:19:
                    a1:77:85:a8:36:d9:9f:8c:48:44:5d:a4:5c:cb:e1:
                    85:ab:9d:d6:ff:e6:77:f2:9f:a2:f8:8c:1e:4c:0f:
                    13:8c:c3:4f:65:5b:eb:96:ac:b9:09:3b:c1:08:cb:
                    7b:5e:ac:44:94:78:9d:8e:50:3a:2f:86:9e:d7:15:
                    96:45:89:96:f0:45:96:96:41:47:45:57:f3:2e:d6:
                    3f:85:e3:3a:ee:83:a0:9e:20:1b:7a:5e:4b:1e:6e:
                    6c:2b:8e:0b:0d:e2:5f:b5:92:bf:fb:0a:55:0a:34:
                    f9:94:be:58:30:b8:98:28:9e:5b:b1:83:3a:35:75:
                    04:5b:61:b6:ad:9e:89:1f:13:f4:64:42:1b:99:fa:
                    02:4a:a5:db:aa:8e:f2:df:0c:94:47:e5:49:9e:00:
                    4a:be:79:56:d8:65:18:50:eb:09:66:44:29:6b:47:
                    0f:2e:bc:ca:a3:7a:d0:85:2c:f6:02:27:0b:81:65:
                    66:24:13:7d:f2:3b:ba:4c:a9:c1:71:9b:a1:d3:58:
                    0f:82:0e:09:1d:3a:42:2e:f4:1b:3a:00:76:07:38:
                    9c:ba:07:49:4c:17:73:2b:6a:c9:b1:0a:fa:37:99:
                    3a:5a:f8:ff:1e:f9:bb:89:75:27:d5:b0:54:7f:3c:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:67:B5:F6:2D:9A:0C:C3:F8:DC:6B:3C:EA:A1:65:B1:C4:B1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/89ee2d13-6c49-3175-8eba-61bc2a010a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38/ce029dcb-bb98-4569-a98c-6f77af488b38.crl

            X509v3 Authority Key Identifier:
                keyid:C3:59:13:02:13:BC:6B:94:3D:09:71:76:E1:DB:8E:A7:37:96:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ce029dcb-bb98-4569-a98c-6f77af488b38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:f9:2a:61:cc:39:c7:c6:e4:a8:c6:00:2c:a9:9b:05:41:
         2d:a9:ea:82:11:08:7a:0e:84:df:cc:69:a4:09:c3:6a:3e:2b:
         cd:98:f5:7d:3f:15:bb:d7:7e:f6:a4:1e:ea:de:33:b9:59:e3:
         16:ad:50:50:67:3d:56:7f:99:84:13:48:1f:23:c4:35:6a:b9:
         ae:ce:39:8b:32:6b:a9:ee:b9:ae:4b:e2:1a:64:7c:0a:6d:8d:
         a1:36:d7:47:20:9b:9d:26:fc:60:8c:3f:6c:82:d6:f5:1d:d6:
         f1:17:fd:11:86:75:ed:d2:9e:ed:f2:cd:df:49:df:ba:1d:6b:
         94:70:1a:99:f6:dc:f5:1f:41:e7:38:62:8f:08:5d:ed:d3:b8:
         2d:68:bc:86:f7:93:26:11:56:80:8b:e9:4b:df:e9:8a:8c:36:
         09:fa:9e:a2:ac:38:18:8c:3d:75:d4:42:c2:5c:1f:08:f7:6b:
         df:1e:85:2f:1f:a6:38:84:59:13:14:8b:a6:39:50:3f:ea:01:
         f7:16:c8:11:30:00:72:0c:31:71:26:6d:f7:dd:97:54:5e:85:
         32:75:4f:4d:27:f9:bc:ec:87:fa:35:03:24:3e:89:2d:c4:76:
         7e:bf:3f:45:45:c9:9c:27:05:75:09:3e:22:53:7c:d3:0d:b8:
         b0:b8:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:40:00 2024 by rpki-client on console-ams.rpki-client.org