Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
File:                     f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa (raw, json)
Hash identifier:          wPXJkA0dCxe9UM7DySbOszPQKJryy0A7t0DT2p0uHrU=
Subject key identifier:   E5:AA:10:EE:5E:6B:D6:18:C5:FF:7E:75:41:A1:96:68:94:F2:72:B2
Certificate issuer:       /CN=2c03f09b-6404-4b04-b989-df1493d00cbb
Certificate serial:       010D0C9F4328583E7A5D332BF7E5222C617C4700
Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa
Signing time:             Tue 05 Jul 2022 18:30:56 +0000
ROA not before:           Tue 05 Jul 2022 18:30:56 +0000
ROA not after:            Wed 10 Jul 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        192.230.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7a:5d:33:2b:f7:e5:22:2c:61:7c:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb
        Validity
            Not Before: Jul  5 18:30:56 2022 GMT
            Not After : Jul 10 04:00:00 2024 GMT
        Subject: CN=2659ad48-6aab-46f1-ae9f-6d8b98bb3e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:dc:f7:37:5f:f9:05:fa:e6:69:cb:e9:1e:
                    d2:94:54:0b:35:06:3d:cd:e6:48:5d:b4:35:d9:94:
                    40:a1:29:ad:8a:2b:ee:b5:a0:a7:26:b6:4d:18:27:
                    9b:c0:38:76:0c:6f:84:32:da:71:34:36:60:89:ab:
                    28:7b:84:8f:8f:0e:aa:a5:91:76:36:8f:29:96:85:
                    3f:93:72:c9:8e:9b:63:a9:5f:4f:1c:2c:16:d4:31:
                    91:0e:69:b4:0e:73:c8:4a:8c:aa:6a:66:08:77:0e:
                    57:3d:f5:46:fd:67:43:c8:82:01:7b:5e:51:91:7a:
                    f0:21:33:82:4e:1c:73:a4:a3:c9:1e:d7:66:44:62:
                    81:41:ea:42:79:77:46:22:9b:99:3a:87:a3:ba:8e:
                    79:31:6d:e1:40:64:00:4f:52:57:a2:a7:a9:06:55:
                    e5:c0:18:47:c0:bb:69:29:96:8c:9a:00:87:8b:cc:
                    0e:b6:e4:95:7e:ac:37:3a:86:ba:7f:4f:37:64:e3:
                    bf:dc:c4:f0:db:a3:a9:8f:22:cb:5e:9a:28:3a:fa:
                    25:27:83:07:08:60:4f:c4:ae:20:72:c0:39:2e:cd:
                    ff:5d:f4:6d:48:fa:81:10:a0:2e:07:d2:27:84:8a:
                    17:a8:7d:db:91:a6:68:08:aa:cb:32:b3:a2:b2:08:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:AA:10:EE:5E:6B:D6:18:C5:FF:7E:75:41:A1:96:68:94:F2:72:B2
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/f7c1cca8-5d59-3fc8-a60d-aabdc5ccc4e2.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl

            X509v3 Authority Key Identifier: 
                keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e6:67:f9:ae:22:f4:74:21:e7:a1:f4:fe:4b:15:0b:3f:9b:
         0a:6e:55:3b:60:35:b9:e7:89:9e:c7:2e:fc:cf:de:b8:7c:8f:
         4f:6a:e3:15:62:a6:d3:21:55:fb:ac:68:ff:ed:a8:c7:24:b9:
         ce:fc:f6:c1:d6:73:43:4f:d2:ef:1d:f4:99:b1:2d:95:a6:eb:
         90:f6:fc:b7:07:87:e3:3d:90:17:ba:52:22:29:cd:5e:0e:82:
         e0:fd:25:89:41:dc:cd:7f:33:90:c7:bf:c4:80:0e:f3:01:c2:
         7d:76:ed:44:00:4f:18:e0:a8:e4:42:ff:56:20:03:92:4d:d0:
         b4:60:a3:c1:70:75:1e:64:6f:a3:e3:83:cb:bb:bd:d1:33:9f:
         03:a7:2f:70:01:3a:30:1f:07:51:af:c7:30:b8:15:bd:c6:1e:
         c2:a0:a8:4e:f6:58:98:81:04:a2:1d:35:2f:4f:17:f7:5a:ef:
         a3:5e:68:96:14:78:af:29:df:f3:7a:46:73:47:5e:b9:0b:44:
         39:05:a6:7e:d6:31:c2:fa:65:bd:14:dc:c2:dc:54:30:ff:b9:
         7b:95:26:9b:1a:4d:f1:80:e8:52:71:94:8b:87:c0:96:3a:16:
         56:c7:ad:d4:84:2e:bf:72:65:76:dc:28:24:73:7b:38:b4:a0:
         be:d7:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:46:35 2023 by rpki-client on console-ams.rpki-client.org