Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa
File:                     e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa (raw, json)
Hash identifier:          nS7/7YoLLIMx8h10dFY2zXg8o1FogkXRVYAuCWcu3O8=
Subject key identifier:   8A:BC:E7:62:EB:1C:8C:11:3F:AA:2B:45:52:36:78:B9:64:28:A0:27
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F432858456128550634EC41BEB16C6780
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     33442
IP address blocks:        157.235.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:55:06:34:ec:41:be:b1:6c:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=19b431f6-92ac-42a9-a0fa-fe98e0944571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a4:f0:62:d4:25:10:81:ba:6c:06:79:76:48:
                    c7:fe:9a:c2:aa:18:05:a7:cf:06:d7:f7:3e:a0:72:
                    e8:d4:13:b3:3a:83:1b:28:e9:df:f4:3c:3f:1d:c9:
                    83:14:86:fd:7c:35:6a:d3:9f:1b:6c:aa:8b:44:94:
                    23:fa:dd:c8:31:fd:ca:01:f4:eb:39:93:1d:02:f0:
                    2d:06:38:35:c3:b8:7b:38:88:4a:6f:6e:8c:33:9c:
                    68:c1:42:4f:07:42:f0:3e:9c:be:58:7a:05:a2:3d:
                    95:dd:b8:ab:35:68:f6:ae:a2:0a:f8:14:ba:52:24:
                    09:c4:78:86:c5:47:54:2e:20:12:7e:06:31:68:0a:
                    6c:2f:9a:ff:22:3e:89:16:66:bf:23:0a:d8:b9:94:
                    70:69:13:b6:06:a2:51:22:48:b9:a5:95:38:b8:44:
                    c2:53:c3:3b:ff:d2:73:f6:e5:65:f0:3c:87:d6:64:
                    5a:c5:84:31:91:1b:c1:ca:ac:c4:67:7e:69:3a:9a:
                    fd:02:43:ea:66:0c:3b:89:ee:6b:98:a9:d7:4d:a6:
                    b0:93:7d:7f:a9:aa:a1:5e:05:28:37:a5:87:36:e2:
                    d0:d1:b6:4e:c0:e1:96:7f:6c:c4:92:1b:ed:14:24:
                    49:52:07:18:7c:d7:ce:0e:68:38:40:f5:99:51:10:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:E7:62:EB:1C:8C:11:3F:AA:2B:45:52:36:78:B9:64:28:A0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.235.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:df:21:63:38:8b:7c:04:48:19:42:5b:b6:97:d5:87:18:
         81:40:be:63:9c:e3:b5:58:bb:cc:b8:67:5b:73:8c:04:9a:35:
         c6:ef:75:e1:67:1f:ee:5f:f0:fb:9e:48:28:a2:79:cf:9a:b3:
         e9:18:a8:ba:ac:ce:d6:22:2d:e2:21:32:2a:c2:3a:d1:65:02:
         cf:20:7b:f1:ae:7e:dd:72:52:26:3b:38:43:8c:d6:af:83:0a:
         c7:b9:82:9e:e5:be:5c:9c:15:ff:28:9d:42:4e:eb:d3:6c:eb:
         f2:87:d2:be:a6:84:7f:d6:05:3d:02:2d:bc:6f:b7:07:44:7b:
         42:33:9c:d1:9d:6a:80:e4:1e:85:da:e0:88:4d:6b:3f:3e:4d:
         0a:33:3e:2c:67:4f:f6:20:b9:39:e7:93:fd:59:70:e8:55:d4:
         1c:07:b7:42:03:4c:c1:e1:b4:98:2c:0b:aa:3f:e8:fa:42:bb:
         3c:ca:d1:1d:73:68:74:db:cf:52:83:89:24:ce:64:72:5b:d6:
         57:53:4c:0d:42:57:98:91:6a:44:21:62:09:ae:46:af:a3:ab:
         e3:26:ad:a8:ac:9c:e8:fa:b3:e0:b1:20:37:d6:20:15:28:f9:
         d0:bc:16:bd:0b:17:4c:bb:18:53:34:a6:25:5e:6d:33:a8:75:
         ec:ab:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:12:22 2024 by rpki-client on console-fra.rpki-client.org