Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa
File:                     0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa (raw, json)
Hash identifier:          HDyQ2OCMQ4xv+AQ2Ag9kl29Tq1tM7CZtLAeiYkCE/BA=
Subject key identifier:   E9:49:90:F0:28:CD:2C:36:93:D6:86:D0:9C:19:29:D4:95:FF:D9:67
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E68E407D18645EB3AE900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:68:e4:07:d1:86:45:eb:3a:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f0275c54-0ac6-44b4-85ca-70ba76f76d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:5a:ca:94:79:f6:00:82:88:e3:44:51:0e:
                    66:c2:5b:da:45:b8:d1:c5:1d:e9:31:b3:73:6b:18:
                    7e:f7:4d:43:f4:96:04:8d:db:8c:5f:f2:01:04:48:
                    2f:4c:41:aa:a7:56:40:d5:cf:7d:88:50:95:75:ce:
                    41:49:78:6c:91:7d:98:05:1c:39:54:21:98:c1:c4:
                    6b:e8:d2:6a:1a:54:b4:a1:73:04:80:a1:89:d7:b5:
                    7b:3c:0a:a8:18:86:f7:11:ce:bf:73:f3:3d:67:d6:
                    22:63:ce:d4:7f:6d:ff:cb:44:12:63:68:86:59:64:
                    d4:41:30:2e:70:2c:c2:bc:82:5e:00:25:d4:c9:af:
                    05:c6:52:7a:d4:7e:2f:a7:f1:40:0f:98:00:33:33:
                    6a:ee:45:91:d5:6f:0e:49:3e:e7:cf:ac:15:62:69:
                    5b:b2:cc:a1:a0:db:68:e0:c7:79:0c:66:59:e3:5c:
                    e2:89:a1:95:bb:9b:e0:22:5b:fa:3f:64:2f:b5:f0:
                    40:1b:e1:87:d6:59:b6:a3:80:2c:d1:0d:fc:ff:b9:
                    02:13:cf:37:ac:c3:93:8d:12:71:f3:08:2b:62:aa:
                    1c:ed:6c:30:36:55:b5:46:4c:53:45:1d:c0:d1:00:
                    df:43:1c:6c:16:6b:a0:75:57:0f:13:41:64:81:57:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:49:90:F0:28:CD:2C:36:93:D6:86:D0:9C:19:29:D4:95:FF:D9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:e4:c0:22:c8:fa:26:72:1c:96:5c:48:40:8f:7e:8d:7a:
         96:46:3e:4d:96:d3:99:ec:15:d6:1e:bb:7b:ed:d9:9f:87:67:
         35:af:e5:d9:07:9d:a3:b0:dd:77:5b:f1:17:ff:b2:08:0a:b8:
         b8:40:ee:38:b3:d0:ac:80:58:2a:4b:d5:f0:8d:64:25:0b:0a:
         98:70:db:50:9b:35:c0:48:56:81:09:7c:7c:4c:6c:15:60:55:
         ba:a4:a7:4a:67:1e:42:8e:d9:7d:04:72:01:29:32:6f:8f:da:
         ea:f4:5f:ac:1d:ee:d4:76:fb:a4:72:ef:fa:95:95:a4:c2:a8:
         bd:5b:c7:3c:f0:d6:09:6d:9a:7e:8e:39:23:ac:a3:15:14:59:
         71:ea:9c:9e:56:09:7b:0a:9d:96:b6:0d:e8:cb:bb:d6:23:c5:
         55:61:69:f8:62:e5:6c:8c:a7:e3:b0:53:00:87:db:cb:8a:04:
         47:83:4a:e0:91:78:6e:30:a4:ea:10:2c:10:54:44:27:f7:53:
         2b:f1:ee:a1:ac:7a:3b:93:c4:a7:c1:a5:bd:f0:7d:32:64:f8:
         77:f1:34:1d:f0:ad:bf:24:f0:21:54:5c:73:01:f0:b7:62:d1:
         63:3f:db:04:2c:fd:06:88:60:2b:02:3a:15:47:e3:db:78:55:
         8f:14:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org