Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa
File:                     f36d807b-444f-31a4-938c-5628c6acfe61.roa (raw, json)
Hash identifier:          3NzMuBKDTZfywBJ0c87s7as/ChXojVh/rlpzZxKGDEs=
Subject key identifier:   1A:DF:DA:A6:95:25:4F:16:5E:2E:9C:EC:A5:47:EA:A2:D6:07:2B:DA
Certificate issuer:       /CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
Certificate serial:       010D0C9F4328584507F021383BE8A45ED9358080
Authority key identifier: C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        5.22.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:21:38:3b:e8:a4:5e:d9:35:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=674316bd-6eeb-4b08-b458-961d4feb7d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:9f:b1:98:2b:80:58:a3:5b:32:08:16:ac:
                    74:40:b6:86:92:13:85:07:3f:71:43:8b:3d:50:be:
                    9e:40:60:c2:4c:cd:8f:dc:6e:0d:f1:bd:dd:7d:73:
                    35:e4:dd:a0:97:1b:20:cc:58:c3:ab:a7:4c:98:ae:
                    29:23:7d:4c:c0:35:d1:94:f7:18:28:96:c3:6c:96:
                    12:78:4a:66:00:06:26:a5:87:12:69:fd:7d:f2:f3:
                    fe:e8:3d:69:4c:fb:c0:a8:e6:16:1f:86:7b:60:0f:
                    68:93:b8:2a:96:44:30:36:b4:b9:6e:ce:b2:dc:ad:
                    19:ce:a7:1b:b2:d3:19:73:4d:10:54:70:7f:d1:a3:
                    8b:e8:bf:fa:c4:4b:64:15:4a:17:ae:51:b2:26:62:
                    58:bf:aa:f2:3a:96:25:fc:91:b1:c9:e6:7f:e8:9d:
                    67:29:f7:79:94:55:b6:d1:77:e8:c3:82:13:f6:3f:
                    36:4c:6a:cf:16:68:42:79:54:69:cb:af:d8:a7:8d:
                    6d:8a:d0:92:9e:18:8b:fb:cc:33:5f:41:3f:4f:20:
                    fc:c9:02:48:c3:12:bc:e0:85:4b:e8:ff:8f:67:f4:
                    cc:76:9c:e8:20:a4:2e:46:06:95:3d:f5:6f:d7:ef:
                    13:cc:4c:13:69:8b:55:1a:c5:33:fb:70:44:d2:d2:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:DA:A6:95:25:4F:16:5E:2E:9C:EC:A5:47:EA:A2:D6:07:2B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/f36d807b-444f-31a4-938c-5628c6acfe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.22.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:51:1e:89:f8:68:fe:8e:cd:56:22:4c:2d:a4:9e:96:fa:f3:
         2c:bb:3a:84:dd:76:1f:d2:65:99:d5:ae:d5:4f:dc:f5:7f:e7:
         cd:27:f7:83:e2:f0:d0:1d:e8:42:99:de:b5:8f:36:1d:88:a1:
         63:72:86:8a:b0:ba:66:ae:f0:3d:4d:e6:a6:61:62:93:7e:b1:
         ce:60:e4:5b:83:ff:76:25:c5:ab:6b:86:f1:75:5b:b5:6c:4d:
         ba:c1:95:86:ca:c8:27:91:f8:da:ac:2e:ed:11:28:5f:1a:cb:
         13:5a:b0:1e:11:36:c2:ad:7d:88:e6:0c:d2:da:d2:1e:fa:5e:
         12:be:4f:e2:ba:6a:3d:49:c9:53:bc:2a:07:90:4e:18:5e:45:
         8a:b2:83:25:b9:af:37:c5:66:4c:9a:25:d6:80:14:e4:c1:5c:
         c6:bb:a9:f0:a3:1b:4a:08:f2:3b:6b:b9:95:c1:c3:32:66:38:
         09:90:3c:52:e1:9a:50:1c:b0:73:fa:fe:c2:26:eb:da:4f:55:
         55:6f:09:1d:0a:8a:5f:3f:88:50:14:4a:1f:21:ed:f0:a9:4e:
         a6:f9:2d:2b:30:27:38:22:05:15:07:2f:f0:c9:52:c4:18:97:
         7e:55:67:c5:d6:62:9c:64:15:d9:48:af:27:86:ae:70:fc:de:
         b0:75:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:51:52 2024 by rpki-client on console-ams.rpki-client.org