Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa
File:                     bfa20d88-e643-3754-85a9-587efd05c1bb.roa (raw, json)
Hash identifier:          Gu7JA6ENTmg0tgIKlJfuzU2IHfLC84OmYgDoAbuMeuU=
Subject key identifier:   A8:80:15:78:DF:2C:80:4F:53:85:24:D1:9E:2F:B1:D7:23:03:96:5E
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F432858454272C1ED0C02E48B42617700
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     11272
IP address blocks:        199.33.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c1:ed:0c:02:e4:8b:42:61:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=152f4279-dd3d-4fa6-b241-09738db84f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:4c:93:bb:c9:5d:fd:fa:c4:1e:d2:58:d0:
                    d4:01:10:fc:16:58:22:0f:e1:cd:b9:f0:c2:aa:85:
                    88:e9:5e:18:ef:5e:02:82:b3:3f:e2:8c:a5:f9:94:
                    41:0a:c4:c3:fd:4c:57:27:2d:6d:ea:15:5e:d9:5f:
                    c9:88:f7:48:78:0b:a2:20:5b:dd:ff:7a:ca:64:9f:
                    ec:39:a1:26:0b:54:73:2f:ef:5f:75:54:8c:06:8f:
                    62:b2:22:78:a3:b1:74:3f:77:90:9a:ce:1b:fb:d3:
                    db:ee:f6:85:c6:7e:27:55:36:c0:30:59:0a:04:3a:
                    6c:e6:37:a5:c6:f4:67:e2:9a:a7:89:80:34:f1:e9:
                    56:75:a1:ce:8b:db:b8:94:86:c4:40:83:2c:77:81:
                    fa:40:24:3f:62:9b:ea:fe:47:81:85:4f:eb:d1:28:
                    b6:56:37:50:86:91:3e:77:d9:f1:02:1a:dd:fa:d7:
                    60:77:e7:27:b1:6e:17:2a:46:5f:bd:73:53:88:61:
                    40:40:e4:8f:40:c7:8f:e2:ec:73:be:3e:b2:79:f0:
                    e7:da:d6:c3:e3:62:c7:e3:1b:60:70:48:69:e7:f1:
                    3b:4d:16:22:a8:70:c8:0f:fd:32:ec:e8:b8:8e:ba:
                    ce:fb:6d:4c:a6:9d:40:70:b7:b9:38:66:03:b5:dc:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:80:15:78:DF:2C:80:4F:53:85:24:D1:9E:2F:B1:D7:23:03:96:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:2c:40:52:d4:1d:99:57:37:5f:f4:ee:a1:7f:de:6e:19:
         99:9a:d5:b1:d7:d3:1f:37:0a:c7:0d:60:7d:55:d6:a0:f4:8e:
         4c:92:d0:62:d2:2d:12:36:a5:c7:1d:43:c1:57:b2:3c:aa:b3:
         a9:13:a7:3d:13:c7:59:0c:0b:1d:95:30:c1:a5:ce:34:b7:37:
         c7:e9:45:63:c0:27:dc:87:0d:2e:8b:61:5d:50:0d:de:49:67:
         79:b7:3d:6f:34:a9:a3:62:5f:ce:0b:59:5d:15:e4:21:e8:f9:
         60:24:29:3d:c4:74:8f:70:ef:c2:1a:00:fa:f2:cd:8e:e5:05:
         a3:28:a8:19:80:b7:10:a2:c9:72:d8:1c:e4:d3:a5:58:0f:7b:
         cb:f7:9b:7b:03:4a:a8:cf:d4:08:1d:71:50:70:23:41:4d:fb:
         bc:fa:4f:01:51:e0:55:6d:26:0c:c6:3d:52:68:66:90:46:6d:
         fc:18:6b:3d:2a:71:f6:90:76:4b:a6:ac:92:1e:52:62:5c:5e:
         dd:c0:9f:13:79:2e:b9:1d:df:9f:99:8e:9b:3d:a8:2c:d1:f1:
         be:80:2b:2e:62:aa:31:50:b1:0e:21:76:81:51:2e:e5:c1:00:
         71:9b:e1:84:8d:8c:ea:42:0d:a4:cb:a7:4b:86:13:36:e1:a1:
         32:e0:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:59:38 2024 by rpki-client on console-ams.rpki-client.org