Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
File:                     ce422f59-9421-3f6a-952c-c89677146d0b.roa (raw, json)
Hash identifier:          ++G9hqysz4Fiw7RHue5VOacB8dQn9j2vhGYZmYmWY5Q=
Subject key identifier:   20:AE:55:F6:E2:B6:54:88:0B:8D:82:92:28:10:6D:32:21:6B:4D:D3
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F43285845C8739013510236F55076E600
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     23154
IP address blocks:        148.164.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:90:13:51:02:36:f5:50:76:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=cbbb83d3-400d-4c3e-b7da-6fe0882c8880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:52:5c:b5:bc:92:27:c8:23:96:d4:e3:c8:
                    e0:fb:e9:44:28:3f:59:eb:f5:3b:4a:f0:97:fe:05:
                    28:b9:5d:e1:5d:2f:89:3e:9c:9b:a7:a7:ea:b0:f9:
                    aa:1e:3d:db:4b:f5:44:6e:ec:6f:45:6d:59:26:18:
                    20:9e:c8:5c:a9:87:ff:b0:90:a5:57:ad:fd:3c:81:
                    de:d1:35:45:26:9a:76:70:9c:89:52:ff:42:93:67:
                    b6:34:62:8d:08:76:24:68:56:e2:b6:d9:a0:ac:8c:
                    bb:8a:74:30:49:61:82:0b:7c:19:a0:46:26:4d:2d:
                    59:50:2b:76:50:69:62:ff:71:6f:36:81:06:bf:4c:
                    e1:17:d8:26:fb:84:f7:52:5a:a2:cc:1b:60:4d:83:
                    85:12:bb:ca:fe:a9:e1:d1:89:ec:57:f9:5d:cc:9c:
                    fc:0a:39:47:8c:15:e9:a3:8a:99:00:c1:f4:e7:b9:
                    f6:3a:28:95:7a:b4:13:0b:a5:16:2f:e9:4e:ad:c0:
                    1f:d0:75:e8:22:26:dd:5c:74:c8:07:ee:28:13:ad:
                    0b:a4:71:f9:f2:5c:b4:14:8f:90:9f:dc:44:be:cf:
                    44:14:23:d5:cb:06:04:fd:0f:dd:ad:20:4b:4b:72:
                    6a:18:18:be:fa:4e:0e:9d:2f:7c:22:86:45:95:7e:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:55:F6:E2:B6:54:88:0B:8D:82:92:28:10:6D:32:21:6B:4D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/ce422f59-9421-3f6a-952c-c89677146d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7d:ce:49:a1:d7:23:79:46:ed:d2:f3:7b:b1:73:ae:97:73:
         9f:5c:35:8d:f4:f7:25:57:9a:c8:f7:aa:41:f5:1a:ab:d5:4f:
         40:d5:5d:be:94:c0:8b:e3:cf:94:f4:b7:2d:8d:7f:e2:d0:ea:
         c7:e9:15:04:99:81:a3:a0:f5:ec:ef:ba:13:c9:ba:35:b5:90:
         59:27:23:45:49:06:07:67:ff:29:0a:cf:ef:06:6f:09:f6:6a:
         7d:5e:02:48:0f:dd:08:80:88:63:ba:80:df:44:50:cc:4e:fb:
         1e:f6:21:ba:5a:7a:8d:70:9a:b4:1c:35:3a:41:7f:69:a5:85:
         57:45:0e:51:25:24:28:e4:f2:56:f4:b4:1c:dc:0d:62:8c:e8:
         fb:e4:5c:d3:11:bc:de:4f:5f:64:e2:33:8d:e5:35:72:2f:ee:
         43:61:9e:2b:6c:7a:54:70:4f:3d:2f:31:e6:9f:0e:bb:5a:aa:
         06:6c:b9:97:89:27:35:29:40:42:2e:a9:e7:4b:8a:02:af:e5:
         f8:95:a8:90:ce:56:17:80:a3:92:81:9e:6d:12:e0:92:47:52:
         3d:10:14:1c:6c:f8:5f:57:6e:b6:b4:3c:a8:c4:ca:87:44:77:
         b7:c0:4b:71:b2:0b:5b:31:37:31:2c:17:a4:25:fb:ba:df:6f:
         93:31:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:55 2024 by rpki-client on console-fra.rpki-client.org