Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
File:                     982afe77-fc9c-3f87-a4df-328bd01590ad.roa (raw, json)
Hash identifier:          /QmTfSwxJEbQ1dpLiXiR/9F9QXG57tBL5/inJNi7rfg=
Subject key identifier:   87:14:A9:D5:AA:88:DE:B1:F6:C5:F8:A1:E6:FD:DF:0A:7B:D4:0F:42
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F43285845840DCFB83CDE56BE54B44820
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        198.252.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cf:b8:3c:de:56:be:54:b4:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=559983da-d1df-45a3-8747-c2078ae33793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:68:4d:6c:c8:eb:8f:73:8b:44:ed:d6:4d:
                    1a:6f:dc:34:02:fd:8b:34:1e:26:26:23:c4:77:1b:
                    3a:6a:ed:dd:d7:49:f4:4a:90:b2:31:bc:2f:54:41:
                    60:a3:d7:65:ae:b9:43:b6:af:e8:6a:90:e8:8f:0f:
                    20:db:16:d7:f9:a5:e6:3e:5d:00:a6:35:07:08:21:
                    17:c3:8a:f4:b1:4e:82:1c:52:62:74:32:4b:15:ce:
                    60:35:e7:0e:12:06:42:e2:d6:f2:94:cd:6d:53:f9:
                    5b:0c:cc:4a:6c:a3:01:d0:2e:f8:06:aa:2d:3c:13:
                    43:07:48:6f:98:2d:84:e3:35:46:70:33:fb:cb:a8:
                    63:51:ae:0b:de:4d:ed:81:13:1f:84:3c:68:b1:7c:
                    a3:12:48:3a:88:0f:b6:28:5e:36:51:33:5f:b8:f8:
                    3e:38:ea:4c:5d:22:ba:c5:2b:2b:5f:ea:40:75:62:
                    01:81:05:4d:29:83:fe:60:f0:8d:90:78:9c:d6:86:
                    0e:df:a4:1f:c5:82:d9:2a:c5:a9:04:30:76:14:be:
                    dd:94:bc:c9:1e:50:3f:6a:59:17:ca:3e:aa:da:9b:
                    ef:6e:e0:e7:92:78:35:d7:78:25:d8:3e:44:a4:31:
                    e8:98:b9:f6:3a:01:b6:66:2f:47:c9:9c:4a:0b:c8:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:A9:D5:AA:88:DE:B1:F6:C5:F8:A1:E6:FD:DF:0A:7B:D4:0F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:46:80:48:cf:cd:c7:76:41:a2:98:07:22:97:f3:dd:15:b3:
         01:db:7a:3c:70:a6:e4:c3:df:64:81:65:d6:f4:dd:dc:9a:5c:
         ea:06:3c:74:3c:6a:49:a1:3c:84:1a:c9:1e:82:fc:b0:ad:dc:
         52:e5:d2:e7:a1:05:bf:29:d3:4e:37:10:3e:b7:5e:de:84:ca:
         8a:30:20:da:f0:60:94:a3:e3:7a:57:8e:91:b6:3f:41:17:4b:
         ac:47:4d:12:94:42:9c:e3:e1:f1:0b:f5:fa:7b:a7:b6:0f:fc:
         0b:75:56:0e:69:b8:cb:43:80:53:14:7c:3f:ff:85:63:85:85:
         b0:b5:b5:0f:23:45:2f:1d:8e:c0:04:47:bc:0f:d1:b8:70:4a:
         bf:6c:9a:23:96:4a:c9:46:33:a2:5e:20:c9:fe:73:ea:53:67:
         b0:fe:3a:94:4d:05:44:16:cb:12:88:8b:6a:e1:9d:19:ff:3b:
         11:cd:6e:3c:bc:7b:a7:f7:1c:51:06:0b:87:c6:60:ad:ba:8c:
         ae:63:08:04:d7:5d:96:c4:46:94:af:71:3b:50:b3:7f:3e:fb:
         36:12:f1:ec:b9:1d:61:26:0e:5f:e9:0f:dc:e3:0d:81:5d:ed:
         c7:64:44:40:a5:1c:e8:e3:af:46:b8:22:7c:0c:8a:1c:1f:8c:
         14:1d:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:42:21 2024 by rpki-client on console-ams.rpki-client.org