Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
File:                     79814cba-34dc-3c46-bba8-f2748c8cf241.roa (raw, json)
Hash identifier:          M08flkRnDzr9Op7Q09qyy5Wufsx84/EvYXD74BTkacs=
Subject key identifier:   A9:50:A1:A1:0B:1C:5B:A1:2A:9E:01:1E:4C:D8:19:A3:BD:25:BE:1F
Certificate issuer:       /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial:       010D0C9F43285845B3444F53812B334F739B7C80
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
Signing time:             Sun 28 Apr 2024 22:53:24 +0000
ROA not before:           Sun 28 Apr 2024 22:53:24 +0000
ROA not after:            Sat 27 Jul 2024 22:53:24 +0000
asID:                     26842
IP address blocks:        12.171.137.0/24 maxlen: 24
                          12.189.192.0/24 maxlen: 24
                          12.189.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:44:4f:53:81:2b:33:4f:73:9b:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
        Validity
            Not Before: Apr 28 22:53:24 2024 GMT
            Not After : Jul 27 22:53:24 2024 GMT
        Subject: CN=a4e02178-6019-4f07-b28c-f65dce3d6a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:1e:05:24:0f:8b:c2:d0:40:9e:d4:56:83:
                    9a:2b:a7:3d:09:0e:21:6e:1e:d9:57:13:1d:22:a4:
                    78:42:e9:be:ae:5a:e7:4c:b1:fb:9e:61:98:a7:2c:
                    b0:a9:9c:3c:9f:d2:27:eb:45:97:4c:29:19:f6:b4:
                    c2:26:50:37:cd:b4:eb:6a:d2:13:34:96:1d:b6:3c:
                    66:98:b2:ef:71:a0:ef:f5:40:c8:a2:bd:3b:8d:4e:
                    60:73:65:b0:ea:a7:59:67:33:ac:c4:6c:5f:97:39:
                    7d:f0:e9:4c:bf:c6:4b:fe:25:47:d9:ec:35:34:4b:
                    fd:52:d0:cf:86:43:67:8a:80:86:c0:36:a9:85:26:
                    cb:3e:cd:78:85:f6:ee:69:09:31:5e:11:64:39:be:
                    61:15:16:b1:94:89:c4:bd:bd:66:1e:08:cd:4e:6f:
                    92:d8:0a:e8:d0:ba:8f:19:bc:8a:bd:31:c9:96:8d:
                    8b:67:ff:d3:6d:8c:d9:54:51:1b:49:cd:2b:16:4f:
                    4c:52:0e:84:d6:09:e8:c8:15:51:38:3d:4b:e9:25:
                    0c:64:e8:92:1c:be:c5:dd:7e:00:ed:55:24:3b:5b:
                    b5:31:1d:4a:f3:9c:3c:99:bd:ab:1f:55:12:13:7a:
                    d4:a0:80:3e:68:c7:26:16:d7:50:59:8f:8f:71:bb:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:50:A1:A1:0B:1C:5B:A1:2A:9E:01:1E:4C:D8:19:A3:BD:25:BE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl

            X509v3 Authority Key Identifier:
                keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.171.137.0/24
                  12.189.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:84:91:d2:29:b9:42:a4:f7:93:5d:99:0e:b6:ff:ef:ce:
         01:ff:a5:fc:80:04:e5:ae:7f:b2:b7:e5:a6:c9:f2:ab:95:3d:
         32:91:bc:b2:8d:e5:4a:c9:a1:dd:56:e7:54:6e:a5:0b:ba:e9:
         f7:21:bd:b5:4d:85:2d:f8:39:72:a7:a9:1f:a8:89:a6:6b:a1:
         6e:59:c7:0b:5c:2a:d7:16:d7:78:ad:85:a5:5e:6a:01:b3:22:
         6a:a8:54:c5:ad:31:23:84:55:5d:74:bf:a3:76:2b:21:5c:9a:
         ff:54:29:80:77:d2:ff:7c:59:08:bc:29:61:90:39:ec:7a:d9:
         b5:1a:fe:55:cd:d9:cf:53:35:86:b1:75:e5:dd:98:a3:6a:4d:
         b6:22:d7:bd:cf:b3:9e:35:2e:4c:61:ab:e0:cd:34:ae:d7:b1:
         f9:ab:8f:23:95:2f:2a:cc:02:b6:9c:19:a9:a3:6c:35:be:5e:
         59:5c:34:e0:27:fe:2e:ff:e9:e8:64:c9:7f:65:8b:2d:53:66:
         14:e3:a7:8b:dd:82:2b:1b:c0:4d:ad:ce:32:3b:f9:fb:ed:02:
         28:77:b2:22:bb:bf:b7:eb:aa:22:00:1f:3e:62:89:c4:71:06:
         31:6c:04:03:19:52:0b:f7:e0:4f:a4:cf:7b:4f:f5:32:aa:e1:
         20:78:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:56:18 2024 by rpki-client on console-fra.rpki-client.org