Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa
File:                     99d98cbf-a424-394a-80b4-1fed4526e550.roa (raw, json)
Hash identifier:          7ftAGOADK3SmZcA3JDWgWIYbTCVl8k9eKH9WtBnpFYo=
Subject key identifier:   CF:E0:E4:C3:93:8F:06:7C:2A:C9:75:FB:65:9B:5C:10:EC:87:C7:4B
Certificate issuer:       /CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Certificate serial:       010D0C9F43285844EC0546DA10688CA21964A140
Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        192.230.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:46:da:10:68:8c:a2:19:64:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=5aa21a66-4335-46db-84c9-2073fa9e0151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:2f:df:c6:98:31:41:1e:28:e3:09:1d:82:
                    97:da:e2:45:81:b6:3e:fd:bd:1e:d6:ff:f5:cc:5b:
                    fa:da:de:78:54:a5:dd:d0:80:e8:d9:51:16:9f:ce:
                    a2:43:ac:09:06:4a:d5:a7:1f:5a:39:45:d2:89:28:
                    26:31:29:6c:20:a7:38:5c:48:5c:33:82:8e:c5:28:
                    d3:07:37:0e:ba:66:34:b6:3f:6d:27:19:6d:9c:38:
                    3c:a5:6a:d0:a8:69:02:01:6a:a4:a7:92:56:81:7a:
                    30:0f:cf:11:dc:f3:a5:01:39:66:ef:0a:85:45:c0:
                    83:2c:ec:30:85:27:10:f7:85:4a:71:59:93:b1:f3:
                    d5:d6:52:ea:d1:db:5a:07:24:c4:97:a3:e1:6a:fc:
                    af:6e:a3:d7:5e:c1:3c:63:3f:0e:18:8b:ab:50:19:
                    18:14:ab:f5:9e:cf:00:00:12:79:e4:86:9e:da:fa:
                    35:ac:da:ff:05:03:2a:eb:1f:4f:b6:41:fa:19:c5:
                    1c:a7:29:3f:f5:ab:7c:a6:e6:5a:f1:bf:f4:42:72:
                    ac:c6:e6:5f:17:08:87:c2:dc:8b:26:08:e4:c6:ad:
                    79:62:15:e6:b6:b5:d2:d3:be:e5:7b:17:09:3f:a7:
                    8d:18:cc:2e:47:cf:b3:a1:7f:0e:26:18:70:5a:87:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:E4:C3:93:8F:06:7C:2A:C9:75:FB:65:9B:5C:10:EC:87:C7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl

            X509v3 Authority Key Identifier:
                keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:1f:07:96:1f:9e:c6:83:d6:ea:65:14:6e:f8:43:cd:c3:
         71:2d:b5:02:0b:25:d3:95:16:b8:ea:d9:29:99:18:cf:95:13:
         2c:05:1c:e1:08:c7:4f:ef:e6:51:b9:cc:90:4e:f5:bf:47:dd:
         f5:93:70:e0:cf:be:07:c5:5d:76:cf:7c:05:3e:a6:56:60:f7:
         5d:08:18:0b:12:50:36:a8:a4:92:1c:38:d9:b8:3c:28:9d:8e:
         8c:a2:fa:f6:d7:dd:57:4d:33:5a:a4:65:28:ea:d9:52:a4:f9:
         53:8c:5a:af:a9:1e:52:99:8d:9b:1b:7f:b5:9f:22:a2:81:74:
         fd:38:9d:30:0b:d2:5b:1b:cc:b1:3f:5d:27:46:a5:02:52:67:
         81:01:89:0c:ba:6d:3d:73:94:d3:ea:93:cc:a0:68:4e:3a:a5:
         f7:23:50:61:57:eb:a5:f8:8a:36:1c:71:00:55:7e:01:3e:fb:
         d5:e5:f7:2d:a1:d8:22:a7:da:c8:9f:b6:51:33:df:f3:7a:6e:
         b7:71:f1:ce:7a:1e:33:38:ee:72:24:c1:46:28:57:f7:1b:82:
         60:77:9c:d1:52:51:85:05:af:e6:81:52:3c:22:e0:2e:a3:ef:
         f8:6f:a8:43:da:56:c5:c4:5d:00:92:d1:39:ec:b0:7b:66:2a:
         dc:2d:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:48:12 2024 by rpki-client on console-fra.rpki-client.org