Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/44e9fd6e-3286-3c45-b9b7-3615eb52087a.roa
File:                     44e9fd6e-3286-3c45-b9b7-3615eb52087a.roa (raw, json)
Hash identifier:          dypKRE8YSkpTZDL8BNz1Zl5bbW8GOT3M/H4SkC6QZik=
Subject key identifier:   89:5B:8C:8F:4A:26:25:14:C5:79:5D:AD:A6:58:30:F0:71:A4:AF:64
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F43285845ADEE16825CA2B5BA69883D80
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/44e9fd6e-3286-3c45-b9b7-3615eb52087a.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     3477
IP address blocks:        192.153.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:16:82:5c:a2:b5:ba:69:88:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=b23e5cf9-bcfa-4905-b77c-4ffc2669195e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:70:09:7d:33:5b:db:09:c4:b0:11:95:2d:
                    3f:da:a3:d3:bf:7f:84:c4:26:d9:7d:c6:fe:f0:b0:
                    03:d8:ed:d8:bf:a5:f7:ab:07:4a:c2:87:7f:e8:81:
                    44:b1:27:6a:3a:3b:a3:b9:96:52:ba:5a:94:42:e0:
                    da:ce:45:eb:0c:fc:53:81:79:b7:d2:cd:79:72:e3:
                    07:8a:3c:51:bc:2c:71:a0:bc:bd:be:45:5c:f8:cd:
                    42:83:8c:3f:ad:0b:cd:d3:bb:02:09:64:89:e3:00:
                    46:06:11:b4:04:c4:48:aa:88:b9:c6:0e:ab:c3:14:
                    47:d4:60:0f:7e:01:b6:be:0a:49:f8:9b:f5:f7:92:
                    89:60:38:72:77:8f:2e:7b:14:70:e8:4c:8c:2a:ce:
                    20:43:c5:b8:d3:93:89:ac:ee:f2:6d:81:54:1f:c1:
                    45:aa:b6:67:0a:be:77:f9:8a:42:c3:6a:bb:f8:61:
                    4d:ba:ad:5e:f9:26:c3:ee:20:fd:3d:d5:4c:64:10:
                    08:d3:ac:f2:24:2a:3a:de:43:3d:f9:0c:b5:e7:8d:
                    44:c5:cc:d9:b7:c7:da:27:82:9d:93:4f:98:8c:21:
                    5a:4b:61:50:59:16:a8:96:76:cf:03:b4:b1:fb:63:
                    5c:b3:98:f9:27:53:4a:38:de:c7:03:70:63:60:31:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:8C:8F:4A:26:25:14:C5:79:5D:AD:A6:58:30:F0:71:A4:AF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/44e9fd6e-3286-3c45-b9b7-3615eb52087a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:99:56:df:bb:40:f8:fd:9b:a5:b2:9e:fd:d1:e3:c0:21:
         c7:51:54:88:1d:de:48:17:74:c2:dc:d3:5b:39:50:9a:cb:dc:
         cd:43:d7:3a:06:bb:fc:b2:e9:75:42:f0:10:38:a7:59:a4:eb:
         e1:d9:83:41:f5:ff:f9:6c:cd:2e:7b:1f:6f:4e:5a:49:62:66:
         33:1f:7c:97:ff:14:02:3b:0b:19:c8:66:74:5b:92:9c:74:37:
         a7:b7:d2:4d:8d:6a:23:71:69:5a:06:a6:bb:67:0d:6a:a2:12:
         b0:d1:62:69:e7:93:5d:ff:dc:c5:14:df:83:62:9f:41:c1:61:
         22:bb:47:6e:91:84:fc:36:44:f4:b4:f9:28:37:2a:c5:89:d8:
         63:78:7c:9b:da:a3:ba:86:84:36:a9:02:4c:9d:70:6f:d3:00:
         33:bd:e3:09:67:37:f3:1e:31:9f:36:01:3e:2e:b0:25:3d:02:
         3b:b4:bd:b6:90:dd:a0:0b:41:c2:e5:f7:59:5c:4d:c5:70:22:
         7c:10:86:92:2b:47:ad:ee:49:06:2f:f7:b8:70:13:64:bf:e7:
         6e:a0:20:26:73:bb:cc:fb:05:1d:4e:93:a9:ac:c4:a6:a8:7f:
         ea:bd:77:31:a4:77:b7:0d:66:90:59:b4:fd:d0:69:05:58:67:
         69:a8:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-ams.rpki-client.org