Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
File:                     393b44f8-5adf-321e-86dd-e66161f45087.roa (raw, json)
Hash identifier:          5wtf4VmBPGc45oTu3Yp9jPvt/U4Zls0HogahREB0wM8=
Subject key identifier:   35:74:D6:1B:45:9F:A5:4F:E5:DC:50:2E:16:36:E1:E5:84:B8:4F:5E
Certificate issuer:       /CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
Certificate serial:       010D0C9F43285845C1791738C1A6776671D5B680
Authority key identifier: C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     396291
IP address blocks:        192.190.172.0/24 maxlen: 24
                          209.94.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:17:38:c1:a6:77:66:71:d5:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=70e45bdd-7690-457f-a2bf-01fd8d8d7cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:df:1d:8c:14:39:18:9c:77:98:25:af:a6:
                    ea:de:d6:c0:51:58:30:0b:25:51:7e:e3:ce:a3:39:
                    28:51:41:9c:5f:78:10:03:84:80:ee:db:d4:be:27:
                    d1:2d:8c:c0:12:30:d1:b9:2d:ed:2b:df:fc:af:cb:
                    52:6e:9c:78:f1:a7:5e:ed:82:1c:99:a7:0a:f6:6e:
                    7e:dc:c2:08:57:70:e9:c6:ee:1f:22:e2:6e:7c:c4:
                    e2:d3:19:43:22:90:73:fe:6f:7c:07:0c:dc:f4:b0:
                    51:8c:2a:98:de:98:21:5e:cd:c1:81:11:5d:51:4f:
                    7f:6e:28:a2:5a:34:5e:46:57:95:c3:65:f6:2c:f2:
                    88:f9:67:b7:4e:91:d3:34:54:e9:ca:ad:80:20:e8:
                    7c:f9:ee:fb:b7:09:6f:1e:b2:e7:d1:96:87:9b:a6:
                    bb:97:c1:88:a1:40:d4:55:96:dd:0a:0b:78:d9:dd:
                    36:0d:4b:9d:ff:e9:89:03:82:ee:17:1a:c0:b0:e5:
                    1d:46:d4:63:2f:2d:bb:de:b7:1d:a4:bb:97:24:1c:
                    fe:06:1e:ca:8d:3b:6a:91:cd:45:c7:af:ec:2f:92:
                    58:66:80:98:8c:60:4b:ea:5b:48:c9:e1:b4:13:e0:
                    8d:cc:5a:f0:a2:36:66:95:9d:f8:32:96:0c:cd:ae:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:D6:1B:45:9F:A5:4F:E5:DC:50:2E:16:36:E1:E5:84:B8:4F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.172.0/24
                  209.94.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:2e:1b:86:b2:33:1e:42:91:82:30:8c:b3:97:eb:13:8f:50:
         49:d2:13:b9:19:55:35:ee:63:7a:96:9a:bf:6d:51:90:c1:40:
         7a:2b:b5:01:43:56:82:cd:d3:8e:29:bd:b4:a7:d6:ac:47:3b:
         eb:07:df:bb:89:04:49:bd:f5:37:81:8a:a3:b3:85:f0:e8:e3:
         6f:5c:87:f0:f0:f5:11:96:19:8e:6b:7c:14:14:36:23:25:52:
         aa:a9:ba:62:72:62:cd:96:e6:ca:bb:d6:94:8d:ff:6f:26:cd:
         ac:e8:2b:4d:27:e6:7e:b0:dd:b9:0c:dd:4c:85:ff:53:81:95:
         bc:21:08:1b:a3:47:24:0d:9e:ed:f4:cb:a9:26:9a:fd:41:90:
         b3:12:b1:5c:26:f7:40:45:67:fe:6f:45:b4:54:d6:b6:90:b5:
         cd:d7:90:7e:74:a1:43:13:c6:72:9e:73:b7:40:40:bb:ab:fd:
         ae:bf:e2:57:e7:9c:f7:24:75:a0:a7:19:f8:49:95:db:65:71:
         af:fd:dc:16:1a:0c:14:f3:53:f0:05:65:c6:c0:3d:b3:0f:4f:
         3a:82:f3:bb:74:d1:5d:74:7f:e6:b3:5a:09:56:20:2d:28:24:
         84:0d:72:a1:36:42:f0:7b:61:79:f2:59:c4:e8:a1:77:ba:fa:
         22:cd:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org