Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
File:                     a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json)
Hash identifier:          HURQV9ZL0N6/91/TJ71/seyNOn1McF4e9hp7QtwfCN0=
Subject key identifier:   B2:55:3C:BB:F0:E0:6C:F1:08:21:EC:69:F5:93:FF:FA:B5:0D:41:13
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285845506825F0494539A3B5941B00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     396253
IP address blocks:        149.19.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:25:f0:49:45:39:a3:b5:94:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=ea2f8f6b-383c-4e05-8e67-a25a0d06b5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:37:b1:37:26:16:2a:62:d5:a9:a1:0c:63:
                    9f:9b:10:33:b0:94:d8:80:0b:5d:32:53:c4:05:ad:
                    78:c7:e9:4f:d2:d0:eb:80:cc:4b:df:43:1e:dc:ff:
                    53:f5:2a:dd:0d:ee:a7:49:6d:64:ce:fb:34:c5:c9:
                    fe:4c:a0:65:33:1e:bd:aa:f8:d5:e0:18:5a:27:a5:
                    bb:aa:d8:bd:a9:a3:eb:63:e0:ec:e6:4d:ab:9d:8d:
                    60:af:c2:27:83:81:41:af:30:9b:f9:9a:02:8c:87:
                    d3:cf:3e:ee:c6:a1:1e:64:3f:27:40:34:b8:17:5e:
                    77:b6:3e:05:76:c5:da:20:3d:b4:85:04:a2:c9:d4:
                    52:25:52:fc:0c:35:c7:a7:c6:bb:04:6d:6d:78:f8:
                    28:78:9c:3a:be:0a:0c:88:eb:db:ee:de:c2:7e:14:
                    5c:65:d4:57:af:fd:90:55:8a:74:27:8a:af:e8:fa:
                    c6:77:e4:23:b1:af:9c:40:a8:79:62:48:d9:2a:61:
                    75:c1:62:29:6a:c4:17:8d:e1:1a:e4:e2:93:b5:ff:
                    ee:da:ac:31:b3:c1:2b:20:3f:1b:c4:4a:37:0e:4f:
                    47:76:ec:e6:d0:cd:62:19:b0:ae:56:68:25:90:1a:
                    bf:8a:64:6e:93:d7:25:c5:a1:ca:32:3b:9d:41:63:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:3C:BB:F0:E0:6C:F1:08:21:EC:69:F5:93:FF:FA:B5:0D:41:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:2b:aa:96:45:a0:2a:74:e9:bd:d9:6f:64:7e:8e:c1:75:
         82:e1:65:2f:6a:0b:f8:5d:e1:54:b4:d9:5c:a8:ef:b7:d7:2f:
         79:96:78:b1:db:2a:00:6e:55:1e:86:d9:00:b6:e2:9c:7c:65:
         b5:95:09:b9:2b:77:64:dc:bd:9f:b4:ab:1e:ea:8c:4b:ca:18:
         79:86:14:84:9a:28:39:d6:c4:81:1f:ef:38:da:7f:5e:7e:a8:
         d5:54:19:58:9b:d8:79:92:20:8e:7f:ec:48:65:cb:99:67:8b:
         c9:f0:72:40:1d:74:ff:2e:ec:a8:ee:21:e8:e4:cf:4b:95:29:
         4e:27:08:a9:0e:6b:02:1f:e6:5a:ab:d5:73:62:3f:f4:f8:5d:
         9c:d3:9f:34:ce:c5:2f:75:78:b1:bb:c3:9f:1a:d5:20:79:83:
         eb:f7:c9:ca:4e:2f:46:1c:ef:7a:f1:9a:82:30:e5:79:74:29:
         c3:58:39:1f:8b:7c:d3:91:ec:90:f4:21:63:82:1b:12:bd:15:
         49:21:6b:a7:78:93:1b:22:1b:5b:7d:12:c5:fe:08:6b:d8:77:
         56:8d:ce:dc:f4:a1:67:12:32:be:f8:56:81:63:32:9d:be:2e:
         cc:4a:93:e2:29:45:e7:4c:4a:5b:92:30:14:93:75:a5:d1:3b:
         f6:62:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:09 2024 by rpki-client on console-fra.rpki-client.org