Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
File:                     5db78074-c975-3b6b-bed1-6fc0a0633b64.roa (raw, json)
Hash identifier:          252W1Y4T1kBCCCaSRk3X62geKTufI2GcpJfW3WzcoDs=
Subject key identifier:   E7:F3:EA:E0:EF:42:5C:77:35:6B:74:FF:B3:37:DC:E3:05:61:2A:9F
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285845734DB84A26E852C4552935C0
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     7794
IP address blocks:        199.185.192.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b8:4a:26:e8:52:c4:55:29:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=ba3b30a2-74da-4a50-ab3b-53e4b45aff85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:e3:f9:88:d0:8a:d8:a1:76:4b:a2:c2:a6:
                    96:d4:5d:1b:3f:2a:f2:7c:c3:aa:4b:2d:35:d0:59:
                    65:a1:dd:df:05:c1:57:52:31:7e:d6:da:ad:70:3a:
                    75:07:c8:6a:60:98:05:f1:6b:8b:da:4b:fa:96:2a:
                    74:c8:43:d2:d1:fe:b9:5a:a6:7f:58:8e:92:79:f0:
                    bf:fd:a0:50:0a:76:9a:52:03:d3:c7:53:43:fd:c9:
                    fa:4a:62:c9:99:da:ad:d6:1c:ac:da:2b:10:bb:a6:
                    2e:45:88:6a:f4:bb:4a:8e:0e:13:a0:79:76:28:4c:
                    37:eb:ff:ab:be:37:50:c3:17:bc:56:03:d4:7b:0f:
                    9c:5e:8b:84:3a:6a:2c:7f:32:31:2d:a5:64:10:8b:
                    5a:d3:ee:a6:80:6c:f0:cf:28:8c:89:85:f5:2d:88:
                    5f:00:3c:7e:25:4a:b8:cb:76:42:80:92:2d:b8:bf:
                    09:96:61:50:48:5b:e6:36:07:96:06:dd:bb:98:bf:
                    21:fa:fb:b9:9a:f2:b1:d8:ea:e5:25:d6:4a:11:cd:
                    c9:df:74:28:e8:06:76:8b:ce:dd:25:b3:59:11:8a:
                    c1:83:19:41:53:56:ef:fe:b5:58:13:99:4e:82:c6:
                    eb:20:e2:40:c1:09:3c:2c:cb:d1:09:f7:2e:1a:47:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:EA:E0:EF:42:5C:77:35:6B:74:FF:B3:37:DC:E3:05:61:2A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:ae:a1:a2:df:d0:cf:70:27:85:e9:25:02:a7:06:02:30:
         f7:6b:2e:54:cd:a2:17:2e:bb:d1:a9:11:00:bc:27:a2:e8:36:
         20:c9:d3:cd:27:30:68:6d:b7:ca:03:5a:1d:67:dc:dd:e6:d5:
         ae:f7:82:89:9c:57:53:33:ff:1f:0d:f9:55:31:09:88:86:08:
         41:63:fe:26:d6:a3:45:c5:89:96:26:14:5d:6f:51:f3:84:6f:
         6c:9c:e1:62:eb:b6:a3:3b:55:53:70:15:c2:79:ab:e7:51:a0:
         5a:96:c5:08:ef:51:ca:5a:4d:bb:b0:b1:08:71:ea:9e:28:65:
         77:a4:07:12:d4:8d:dc:d7:e1:44:f5:b6:0f:82:7c:13:d8:69:
         76:9d:5f:fc:12:21:90:36:2b:e6:82:e9:bc:14:8e:e8:54:2d:
         a2:84:01:f6:5e:19:2c:30:43:1a:1b:ea:0b:30:76:e5:6d:c9:
         5f:c0:52:59:36:cc:0d:b9:f4:26:b8:32:18:16:b9:dd:68:64:
         8a:d0:31:81:87:9f:0a:f6:1c:0a:d3:75:51:28:8d:3b:11:3d:
         40:55:6e:70:9c:8e:fc:12:79:fd:fd:78:5c:08:82:13:28:3b:
         d0:13:f1:71:40:01:99:98:81:d8:cb:b1:0f:fb:54:75:02:18:
         69:db:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:25 2024 by rpki-client on console-ams.rpki-client.org