Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
File:                     f0853596-0315-33ac-b801-86570db6ad6d.roa (raw, json)
Hash identifier:          Q1kWpcunzlOC1xcUjtJMFnTVK8MsnkCif7qeD408Hac=
Subject key identifier:   78:32:8E:F4:F1:4E:49:B6:7C:D3:FF:7C:54:0D:73:9F:5C:D1:75:F6
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584515E5908BE9B10BDA8F348D80
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     395201
IP address blocks:        164.152.162.0/23 maxlen: 23
                          134.65.194.0/23 maxlen: 23
                          169.155.170.0/23 maxlen: 23
                          169.155.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:90:8b:e9:b1:0b:da:8f:34:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=9c64e4b1-9520-45eb-8610-53235aedce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:c1:8f:9d:a3:47:05:90:9e:25:85:51:7a:
                    b0:71:a4:b6:10:4d:96:ff:29:e4:03:90:c0:54:81:
                    a7:d0:05:d1:82:67:cc:f5:8d:8e:1f:8e:b2:d0:0f:
                    06:90:e9:10:ab:18:57:f9:47:b1:3b:35:a8:9c:25:
                    a5:ce:ca:ce:4b:91:b3:3e:72:e6:6d:51:d4:81:9f:
                    ae:a3:9e:53:31:13:90:8c:a3:cc:5b:54:ec:ae:cc:
                    99:2c:97:16:53:d8:49:80:3d:00:cb:ca:d8:31:18:
                    a3:15:6b:a8:18:5e:1b:68:56:b8:43:8a:f1:78:63:
                    23:c4:10:02:99:38:0e:70:0e:9f:98:05:95:fa:e2:
                    2a:b4:07:be:16:17:ec:04:22:25:8f:a2:6d:06:cc:
                    30:55:6b:48:29:20:73:14:da:10:f2:36:de:79:d8:
                    f9:98:dd:e4:da:d4:74:9d:e7:42:b8:2b:12:26:09:
                    c5:c3:cd:b3:cd:7b:52:f2:e5:cd:09:05:bd:96:6e:
                    d2:ee:f3:d3:ee:5a:41:86:28:27:ac:3d:fd:50:d4:
                    11:1a:9d:46:c3:d3:db:ab:e2:4c:d7:0c:94:a9:86:
                    83:c7:81:62:3e:e2:1d:11:4e:15:be:93:f0:f3:3a:
                    8f:06:00:53:e4:0e:cd:8a:28:2d:ba:cd:a4:67:5e:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:8E:F4:F1:4E:49:B6:7C:D3:FF:7C:54:0D:73:9F:5C:D1:75:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.194.0/23
                  164.152.162.0/23
                  169.155.46.0/23
                  169.155.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:79:12:09:cb:42:c2:21:3c:b5:26:22:c8:9d:6b:49:62:
         7e:fb:95:0d:b1:f7:f9:63:6c:19:15:ec:49:7e:e1:bd:41:e3:
         cb:98:86:23:4e:a4:e9:4b:c9:e0:dc:39:d1:ec:89:ec:d3:36:
         c0:a2:f8:8e:fb:23:09:d9:54:6a:4e:a4:93:d1:98:21:ce:54:
         2d:59:50:96:e4:2d:8a:3a:7a:7f:1d:dd:b6:8f:36:44:22:0b:
         58:fc:7e:1a:fb:b6:8e:82:3e:eb:c6:26:3b:af:65:c4:c1:58:
         a6:39:f4:8d:c5:8c:84:e6:c8:98:3b:87:e6:9a:e1:0d:f6:96:
         9f:be:ba:a7:4a:1e:bd:39:63:48:ee:db:65:f0:f8:9e:33:61:
         5c:b3:82:6c:2d:d9:94:46:81:ae:34:78:79:3f:a3:85:48:07:
         aa:3e:92:15:73:02:2e:7a:2c:17:00:58:08:0b:29:3d:dc:f0:
         c3:d7:07:d2:fe:ea:8a:ca:00:b8:c6:66:00:31:17:82:a4:e1:
         74:92:bb:2b:7e:00:66:f7:49:3e:b6:a2:fd:7d:72:58:15:0f:
         56:e6:d3:22:45:c3:e1:4f:9c:32:35:f7:88:9e:20:f8:38:7f:
         a0:b0:72:a3:d3:74:c0:94:29:aa:68:8c:60:ba:ad:f8:13:41:
         d4:c6:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:39 2024 by rpki-client on console-ams.rpki-client.org