Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
File:                     922515f7-135b-3413-8cd0-766b8ae7a234.roa (raw, json)
Hash identifier:          xa8d0gl0tuzGAqNsu3+1StYSBuLG6J2OMXPq5bJEi0M=
Subject key identifier:   B4:C0:03:5E:D0:F7:5A:DA:1D:09:82:00:B4:28:02:CF:D8:62:E6:E7
Certificate issuer:       /CN=0265af60-e6e1-4613-b159-33bc6053852a
Certificate serial:       010D0C9F4328584582A88589C8EAAE4F43C970C0
Authority key identifier: CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     399500
IP address blocks:        192.251.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:85:89:c8:ea:ae:4f:43:c9:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0265af60-e6e1-4613-b159-33bc6053852a
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=8325dd8a-ed57-4705-897a-96a11f70048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:b7:92:97:a3:fc:43:6d:10:e3:84:aa:e0:
                    d8:aa:6e:c6:fa:5e:da:a0:dc:3f:13:7d:65:e1:79:
                    fd:8e:33:ec:e4:85:34:cd:89:fa:b5:56:c5:3e:f9:
                    bb:f1:83:87:ac:66:08:c4:5e:06:05:91:95:e5:fe:
                    10:db:9b:7e:8f:f5:fc:c5:92:c8:8f:53:13:0d:fe:
                    8b:0b:6a:3a:23:88:31:4d:c5:0e:36:a3:26:2b:67:
                    0a:1b:fd:d6:1e:b2:c8:a6:29:1d:76:ee:b9:4a:3d:
                    bf:28:7d:b6:71:24:b3:87:f3:94:04:fb:7f:c7:49:
                    5c:53:3f:3a:14:e9:40:00:2b:39:4f:4f:fb:e5:f7:
                    ff:68:d6:55:e7:f4:e3:4c:34:dd:18:7c:49:5f:eb:
                    7d:e9:4e:21:66:bb:15:57:8c:c6:ff:a6:69:c1:c2:
                    d2:cc:ec:c2:82:06:a2:82:24:3f:a6:04:e7:03:2a:
                    91:93:57:d1:7e:62:1e:71:9d:f3:82:7a:6f:e5:5f:
                    28:1b:d3:bc:8d:23:2a:9c:02:e6:75:4a:3e:0d:52:
                    22:63:c3:df:4c:6e:26:26:db:60:89:cc:c3:99:d4:
                    47:d0:01:3c:25:a7:d8:50:d4:08:6f:0d:14:01:53:
                    60:8f:e0:eb:ee:70:5c:db:35:37:be:2b:e8:30:b4:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C0:03:5E:D0:F7:5A:DA:1D:09:82:00:B4:28:02:CF:D8:62:E6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:b6:92:48:01:58:f0:84:3e:96:b4:58:ba:20:ff:6b:85:
         c5:77:c6:1b:58:02:01:8f:df:f6:6b:d1:29:8c:62:52:9a:17:
         c6:8d:d1:83:1d:d0:91:2e:3a:39:f1:7e:19:d4:34:37:b3:7b:
         c4:9a:31:03:71:1c:2c:df:4c:05:90:cf:e0:8b:c5:41:56:66:
         0e:55:e2:0e:0f:7b:fb:1e:db:79:3c:36:a9:90:bc:7c:7a:34:
         58:1e:38:3a:ba:04:d1:4a:cd:23:a7:76:4b:c6:e2:9e:1a:43:
         95:34:82:7b:d3:b4:70:c8:51:63:a6:32:ec:0e:69:fe:aa:03:
         a9:b8:ad:62:e4:83:f8:41:0f:0b:98:b3:39:cc:c4:bf:b0:4c:
         8c:61:44:88:78:fd:74:d6:e9:f9:74:56:df:1b:d9:75:76:25:
         5b:6a:79:cf:c8:b3:cd:ba:37:d9:46:87:8f:ee:15:bc:ac:45:
         24:bc:f7:c4:b3:b8:5a:74:2c:c2:a9:70:ff:39:64:64:c8:da:
         3a:73:39:73:1c:d2:bb:31:cf:9c:af:bc:67:ea:44:b9:05:b4:
         ea:e9:6c:b2:47:39:f9:01:e0:cb:ce:c5:4d:5c:ca:16:c7:fe:
         54:47:5f:05:e0:a3:4a:ff:91:6f:37:13:08:e1:41:67:8f:17:
         e2:f3:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:33 2024 by rpki-client on console-fra.rpki-client.org