Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
File:                     7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa (raw, json)
Hash identifier:          WBsWH94WN9n6cAj7NXERdWMxsKrvX0wmwow5moYwF5s=
Subject key identifier:   87:87:A2:A7:42:61:FD:D1:35:9F:A8:A2:59:77:10:1E:08:D9:65:58
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584566BDB3FC5E91C2245DC7B040
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        168.149.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b3:fc:5e:91:c2:24:5d:c7:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=a73aa187-c304-4626-b120-13871563110b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:90:dd:cd:ab:c4:dc:56:c0:62:bf:76:c8:
                    42:8d:93:55:7c:5b:ba:ce:f7:35:df:a7:a0:28:45:
                    b3:62:a1:da:e7:8a:00:eb:14:13:91:45:c6:bc:42:
                    84:cc:81:5e:e5:7d:b0:94:78:df:df:04:9b:c3:84:
                    55:82:58:0a:b4:36:3d:21:5d:82:de:14:7b:76:8b:
                    fe:93:b7:39:50:5a:c6:ef:ff:c8:87:79:dd:31:2a:
                    2c:b2:5d:ea:0e:3a:43:8a:07:d8:dc:1d:a6:3c:bb:
                    24:da:4e:a3:2f:0f:f0:d2:e5:39:b0:0b:4f:c3:39:
                    aa:7c:33:4a:d9:f9:c3:97:5d:c8:94:5d:a2:45:3c:
                    f8:69:e8:61:76:06:44:44:52:d8:df:4b:d0:22:14:
                    ac:0d:75:4f:2a:29:98:e8:47:70:d8:e8:f7:f4:c7:
                    d7:98:10:fd:88:1a:63:1a:4a:a7:5d:62:0d:62:7e:
                    3a:ea:97:5b:c5:4c:95:44:50:b8:dd:ea:ba:7d:de:
                    ab:5e:8d:b0:d1:39:93:5f:ef:83:bd:df:e4:4f:20:
                    f6:8b:72:00:da:d5:50:b4:81:55:03:fd:c9:23:81:
                    52:ff:5b:97:98:42:4d:33:19:19:55:3b:83:ea:1c:
                    dc:51:58:15:09:6e:22:e4:de:d6:09:75:9a:92:c2:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:A2:A7:42:61:FD:D1:35:9F:A8:A2:59:77:10:1E:08:D9:65:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.149.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:ee:b1:8e:5d:f3:1c:1e:f1:6c:73:b9:ca:b1:c2:c9:98:
         2d:c9:4f:7d:7d:38:0d:82:27:64:4f:5e:02:f4:3d:48:c9:89:
         27:07:46:95:59:77:df:21:2a:d5:89:3e:df:48:e8:cc:8c:77:
         ae:7a:24:b9:cc:43:53:1b:a3:02:38:cf:d4:0e:94:21:34:0f:
         86:65:9a:22:00:e4:60:71:90:88:34:10:7c:cc:92:7f:e3:dd:
         8d:0a:e1:1c:bd:b1:47:61:95:ef:0c:f7:66:15:fd:c3:07:22:
         d0:3d:78:78:17:c5:0a:43:ec:5b:43:ee:59:06:f2:4d:9c:71:
         79:73:ab:cb:57:59:c6:fe:84:19:b7:4e:60:bf:68:b2:5f:35:
         13:c1:af:c8:a6:97:55:66:80:e7:ae:f1:85:0b:4d:98:32:73:
         34:93:87:d2:ff:2a:a3:44:06:db:76:b9:77:61:3a:35:97:67:
         39:a1:07:14:53:77:ff:a0:3d:62:e0:f9:c3:d8:4e:d3:26:05:
         45:87:31:a8:fd:fb:e8:98:c0:69:97:bf:da:92:af:46:89:1a:
         e1:52:57:52:5c:00:ad:ea:00:ca:3d:b9:e6:81:54:88:16:9a:
         ae:0d:65:b3:6a:b5:be:4a:82:a3:97:33:94:cf:e4:4e:09:fa:
         b8:25:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:53:24 2024 by rpki-client on console-ams.rpki-client.org