Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/a8a49a66-e828-307b-bf37-c3e4c112c173.roa
File:                     a8a49a66-e828-307b-bf37-c3e4c112c173.roa (raw, json)
Hash identifier:          lZxhnH7VQUFuaVs0Tf7mfAmSLUW+af4qDP4k6tjN7J0=
Subject key identifier:   5A:91:57:14:FF:C5:2E:BE:33:0F:DD:F3:8D:42:3A:69:25:FE:8B:AD
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F432858450C4A71B77BAA955A8AA68220
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/a8a49a66-e828-307b-bf37-c3e4c112c173.roa
Signing time:             Thu 29 Feb 2024 03:25:46 +0000
ROA not before:           Thu 29 Feb 2024 03:25:46 +0000
ROA not after:            Wed 29 May 2024 02:25:46 +0000
asID:                     7018
IP address blocks:        199.7.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:4a:71:b7:7b:aa:95:5a:8a:a6:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Feb 29 03:25:46 2024 GMT
            Not After : May 29 02:25:46 2024 GMT
        Subject: CN=454cd1d8-c65b-42b2-ba39-c88de5c24f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:d2:f4:77:7d:5a:5e:45:9d:ba:4e:e5:9c:
                    1c:ff:7d:03:4b:a4:50:09:89:74:b7:71:3a:40:28:
                    6a:73:50:19:38:54:71:1e:a9:7c:3f:2c:9b:f5:a9:
                    25:df:20:e2:85:e1:30:d9:e2:78:da:19:9f:27:25:
                    b3:07:a6:6f:41:76:a7:be:84:04:32:6d:69:30:74:
                    91:c9:ba:97:af:09:b8:fa:ab:a5:46:e1:b9:5e:af:
                    f4:1f:0f:bc:3f:4b:74:d0:64:a7:9b:3a:a3:6a:90:
                    45:cf:85:4d:48:30:b9:48:db:2e:42:dc:a0:9a:99:
                    c7:91:17:a5:90:f0:ea:27:b1:71:7b:ba:23:bc:d2:
                    ed:b4:91:70:21:00:f0:51:c7:3c:72:1c:08:4c:56:
                    16:9a:f6:4e:e7:4e:f6:c4:d3:12:f7:04:e1:07:63:
                    3c:15:35:25:e2:d3:25:95:d6:34:6e:74:fe:e7:58:
                    2a:de:f5:af:3f:64:3f:53:45:db:d9:a2:4a:68:f4:
                    41:09:a1:09:5f:64:b9:4b:94:f8:e0:29:e6:50:4d:
                    52:55:78:ff:3f:9d:cf:56:16:2a:dc:5f:a9:ab:5f:
                    b3:7f:30:00:6e:9c:20:3b:73:e0:4f:bf:49:5c:18:
                    2e:dd:a2:5e:06:3f:f1:75:13:62:44:39:36:b0:8e:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:57:14:FF:C5:2E:BE:33:0F:DD:F3:8D:42:3A:69:25:FE:8B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/a8a49a66-e828-307b-bf37-c3e4c112c173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:a4:c4:28:76:e4:c7:25:db:c2:85:e0:ee:22:a6:75:e0:
         32:0c:c7:38:d9:38:c8:1c:99:b9:2b:dd:29:9f:5f:3c:ac:92:
         d6:49:c9:9f:22:3b:c7:6a:4e:a8:59:ea:05:77:3c:12:90:2a:
         c4:cc:bf:a7:e9:52:9c:83:15:24:95:bf:fb:60:bb:8d:51:cb:
         9a:ee:2f:f9:78:97:a6:6d:aa:ea:9e:d8:9f:83:42:d7:4b:a9:
         5e:d7:02:6f:22:a0:81:33:78:0e:0a:61:41:bf:68:c7:99:7d:
         7b:98:e8:18:82:95:4b:2e:da:21:09:f2:26:87:34:85:1a:d4:
         21:f9:49:2a:d1:70:c5:89:5e:d7:d9:5a:96:d6:b3:46:44:53:
         58:d5:78:c6:9c:1b:4d:ec:89:d6:c7:bb:ec:8f:15:d4:68:69:
         72:76:c5:8a:ed:18:bb:41:68:4c:1c:c7:bf:57:db:34:20:e0:
         b0:fa:6f:e0:bc:1c:86:e0:ad:62:7c:38:b3:da:d7:d6:5f:6f:
         fb:ec:f9:aa:90:44:09:4a:96:0e:50:91:53:3c:f7:31:ac:33:
         40:c0:ea:90:6b:8f:a6:b1:87:a6:75:33:7e:88:98:34:f7:bb:
         ba:04:ea:cc:73:00:bd:cc:5f:37:c0:b7:0c:da:c0:e0:54:57:
         88:89:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:39:08 2024 by rpki-client on console-fra.rpki-client.org