Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
File:                     bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa (raw, json)
Hash identifier:          2cqe0p8e08Y+5exo963Fb60ipPQgeAFGwLX2FWKU6Eg=
Subject key identifier:   0B:54:42:9E:84:29:1A:48:31:EF:25:EB:0A:6B:BE:6D:AC:4E:EC:44
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285845C8739FA19949B0F75A83D640
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3360
IP address blocks:        192.25.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9f:a1:99:49:b0:f7:5a:83:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=286f97c9-9247-4087-9ddc-8cb7ed4a27bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:e8:dc:2f:6b:f3:b3:cb:2f:ff:5b:07:2a:
                    5d:ae:50:de:45:b4:a7:59:c4:d1:d7:ff:a8:52:e6:
                    ed:de:df:64:e6:91:05:9b:65:81:1b:35:cb:03:d0:
                    b5:76:d0:94:33:40:0c:84:8c:38:82:7e:15:98:18:
                    5d:e8:66:35:dc:d1:7a:2a:48:ad:b0:9a:a0:0c:b4:
                    53:ac:12:3a:d3:d4:d6:1c:7c:9b:e3:aa:f7:cd:3c:
                    9f:7c:11:8f:47:95:c1:13:cc:8d:19:ce:7c:08:c2:
                    27:9d:a5:95:04:ff:c2:57:7d:9d:dc:f3:d4:4a:e9:
                    13:ab:57:bf:7f:4c:e1:f6:9f:cc:a6:80:56:50:ff:
                    40:ac:e5:bd:2d:78:0b:0b:5d:d3:9d:98:63:58:95:
                    d2:46:3d:6d:10:b8:7f:25:74:ce:63:34:3a:bf:a0:
                    b7:59:64:eb:4f:b7:c4:04:83:59:e5:3e:c8:03:ab:
                    ec:5c:b4:fa:9f:e6:08:d5:df:b1:d4:00:18:ec:71:
                    df:e7:3e:76:e0:c3:41:13:11:1e:15:d3:a6:c0:e2:
                    24:df:c9:fe:81:c0:6e:1c:09:6c:65:5b:e1:ee:e6:
                    9b:b9:e7:4c:33:2f:c1:42:a7:c5:e5:19:0d:a7:c1:
                    29:70:52:28:48:10:42:08:ac:1e:32:45:af:2c:3d:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:42:9E:84:29:1A:48:31:EF:25:EB:0A:6B:BE:6D:AC:4E:EC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bdb2cb7d-200d-307c-b612-9ff94b4c71db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:e9:ad:83:d3:cb:62:fd:2c:cd:bb:0c:1c:b0:d8:17:6c:
         63:3c:01:6e:d9:ab:f6:a6:6f:5c:44:23:4d:e4:78:f7:d3:68:
         41:2f:a4:fd:52:1c:7a:07:9b:84:c6:a2:fd:dd:87:ea:39:ad:
         f4:5e:9a:7f:6d:a2:ca:7c:70:2a:0e:68:97:e1:fe:2a:f6:84:
         dc:2b:0f:07:e2:51:33:7f:47:06:77:06:e9:b6:fe:42:b6:3f:
         4e:3e:fe:28:08:f8:27:f3:79:34:e5:03:e5:a0:ad:13:bf:94:
         43:98:74:fa:71:50:0b:db:09:dd:e6:ab:9b:36:8d:7b:84:53:
         83:38:a0:9c:9c:f7:b7:2d:27:81:b5:16:49:85:bd:75:df:1e:
         d9:d7:81:05:71:30:8c:fa:49:52:c1:e1:89:39:75:aa:f6:ad:
         b9:e9:c3:29:62:13:0e:ec:fb:cf:3b:b3:49:7e:8f:8e:4c:2f:
         1d:e4:09:80:06:dd:81:e6:49:56:41:1e:6b:d1:3b:ad:74:33:
         e7:0c:6b:8c:74:3c:18:9e:5a:3b:aa:03:11:01:9a:e9:5a:56:
         5c:db:a0:f4:d5:0d:e4:ce:d1:5f:d3:04:0c:7e:ab:a9:ad:ba:
         99:2e:c6:6a:80:af:b3:0f:e5:34:75:06:1c:83:7b:c5:90:75:
         e2:b3:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org