Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa
File:                     ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa (raw, json)
Hash identifier:          ZPwsqGzO7h7PZz64A08CIRFwWYgHQg0e+rhm7hMBRbA=
Subject key identifier:   ED:6B:18:ED:13:7F:D7:E1:30:B1:AB:8F:15:DE:2A:39:82:7B:19:0B
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285845E45E6E051C97C058A3FA18C0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     13627
IP address blocks:        198.186.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6e:05:1c:97:c0:58:a3:fa:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=145635de-7441-4199-a3c8-633d8d4f0579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:b0:d9:80:de:23:a3:cc:eb:1b:54:62:63:
                    c1:3e:8f:66:6b:9d:ef:16:ef:b2:fd:44:ee:e5:2d:
                    97:b5:e2:cf:33:e5:3b:b6:a9:00:24:d5:69:89:d0:
                    6c:84:dc:17:6b:1c:3b:ba:6f:5c:30:31:3d:6e:b3:
                    7e:f8:af:11:53:e5:cf:2d:70:e0:a4:0f:66:d0:26:
                    b3:e0:79:80:fd:7b:30:49:2a:ef:58:b4:ec:ef:4d:
                    db:73:3f:89:2b:de:80:cd:97:ad:89:57:84:6d:55:
                    52:8c:3b:80:d6:cf:94:7d:9f:b6:17:32:c3:81:01:
                    19:57:d2:9f:0e:04:e6:c6:08:f2:b0:06:8b:26:6f:
                    be:ec:46:69:c6:a2:2c:0c:a4:33:77:7e:03:06:b7:
                    60:78:1b:a7:96:61:7a:44:fb:bb:92:02:65:18:15:
                    06:10:9f:da:20:7c:6f:a3:38:7a:dc:73:80:d6:16:
                    89:f1:22:bf:20:20:ed:aa:9f:71:07:51:22:fc:39:
                    d3:b3:78:fa:c1:3e:89:cf:d9:9f:d6:47:92:ba:fc:
                    2e:9e:78:55:24:25:e4:e5:84:1f:da:ad:0b:76:60:
                    da:fe:1a:60:fa:eb:21:61:8b:5b:e0:69:df:9c:b3:
                    2a:a2:ea:15:27:2b:c7:9f:2a:49:22:92:a4:61:33:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6B:18:ED:13:7F:D7:E1:30:B1:AB:8F:15:DE:2A:39:82:7B:19:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:a8:3b:70:01:4c:75:3a:7b:db:a9:72:5a:3a:55:08:8c:
         21:52:b8:8f:6c:40:e8:f9:19:bc:f8:3a:7f:b8:cc:5d:1c:76:
         4b:28:9a:29:1a:58:41:9e:bf:83:5e:18:ae:db:44:19:7e:59:
         08:28:64:47:00:b3:55:44:d3:0e:c0:6b:5c:5d:a8:c0:0b:fa:
         09:d9:d5:53:61:2e:86:bb:c0:08:d8:13:90:11:10:ac:0f:2a:
         55:85:65:41:f9:21:34:8c:13:f0:e8:ed:31:c1:20:b6:b2:07:
         79:ef:f8:eb:a6:f0:24:da:63:c4:de:7a:cb:d8:6f:62:03:d7:
         ca:6e:f4:03:3d:79:2b:c1:fe:8e:f3:fb:ad:ac:9e:d6:ca:66:
         ce:13:5a:d6:da:e5:24:05:41:2f:01:b6:66:bc:8b:c7:fc:ba:
         3d:d7:b5:61:19:c5:d9:e4:fd:06:8b:d2:66:05:40:90:6b:12:
         c1:17:eb:d6:dd:c1:7c:f9:8d:fb:8e:90:67:d6:92:1b:6c:de:
         85:2c:b0:14:40:f5:2b:3b:8c:fd:20:82:ef:21:14:c4:af:0c:
         2e:da:97:23:d1:fd:c4:9a:1c:19:32:bd:48:4a:42:92:0c:d7:
         7a:62:0e:81:ad:08:dc:67:84:b4:65:17:48:5a:ab:8e:ec:c8:
         b1:3d:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:38 2024 by rpki-client on console-ams.rpki-client.org