Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
File:                     b8197550-4b47-3563-b11c-54b7f751a9c0.roa (raw, json)
Hash identifier:          KfwuoNUyt4zD3NTaqfmay881ICiG49Y972fmg5dNNz0=
Subject key identifier:   0B:8B:23:48:C2:4D:07:FF:BB:78:93:1A:05:2A:BD:6A:ED:E4:FC:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E68FE9A9E53338CB4F200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:68:fe:9a:9e:53:33:8c:b4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=440e711c-05c1-439a-9044-55ca98824e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:aa:de:be:1d:e0:fa:be:53:8a:28:da:bb:
                    b5:f6:f8:d9:ad:67:32:fb:7f:85:ee:1f:53:0f:5c:
                    f0:c5:85:d4:9e:c5:0a:fc:97:4f:b3:78:95:d8:39:
                    6c:7a:40:04:81:9c:fc:36:e0:f6:a5:fd:dc:7e:e4:
                    5f:08:a8:2e:13:fd:e8:31:bf:db:20:00:02:32:90:
                    35:1f:8f:b0:bc:d6:2d:9b:6a:1b:9a:d7:de:9c:fc:
                    d9:49:91:ff:fe:d3:83:e4:dc:0b:06:2a:7c:36:b0:
                    50:e7:d2:ff:c4:26:ba:cf:b9:fe:59:fe:d1:c4:d5:
                    3b:c7:e7:c2:a8:36:8e:23:94:a3:d4:11:dd:31:f2:
                    67:2d:3e:d5:e0:84:ec:62:0e:f3:0c:cc:8c:ed:56:
                    e0:68:7d:8e:6b:a9:58:1d:c2:08:68:ee:d1:b8:31:
                    99:99:3c:ca:43:8b:a5:76:d1:8f:8b:f7:88:31:79:
                    75:4a:a4:bb:ed:b8:54:71:f5:f6:c2:23:2d:90:2e:
                    d6:55:b1:ea:f1:75:62:eb:28:7f:8c:52:d0:ab:41:
                    19:96:3f:ac:f8:f4:76:e3:cf:65:1f:b2:6c:dc:12:
                    a8:bb:42:47:88:25:19:75:59:bb:bc:08:0e:e5:37:
                    ca:8f:2f:a3:54:59:96:19:12:2d:07:6a:2b:70:b9:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:23:48:C2:4D:07:FF:BB:78:93:1A:05:2A:BD:6A:ED:E4:FC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:f1:5d:32:15:88:c3:e7:d7:2a:3e:63:68:f0:f4:38:e9:0e:
         2d:9c:f3:ad:bc:50:61:8d:15:d2:08:89:b4:bf:d0:fb:7e:52:
         21:72:11:b4:17:35:a5:14:6a:7a:f1:c9:5f:8a:f9:24:ec:32:
         a7:a7:88:be:d1:f1:db:3f:44:1e:32:5d:da:24:05:5d:c9:c5:
         50:b0:e7:fb:1b:88:88:58:6f:df:bc:69:03:92:28:da:d2:f2:
         cb:ac:04:cb:f8:9b:84:6a:47:6b:f5:bb:c1:f4:70:d0:5f:3f:
         f8:cb:ff:5d:eb:a6:31:28:7b:33:f9:2a:52:59:f4:75:f6:83:
         a5:25:18:d9:f2:f2:6d:cf:e0:04:00:13:41:01:81:09:08:53:
         0f:31:dc:46:c0:9a:b2:c7:f4:59:61:f4:bf:0e:8b:40:31:65:
         02:b4:f4:0f:c8:c1:8b:32:b2:38:42:82:22:f2:41:f2:53:15:
         9e:0a:b4:d8:80:5b:90:a4:e9:77:56:73:53:19:d2:96:56:75:
         9e:4f:3d:61:a0:c4:e1:63:07:70:e5:84:8a:13:59:e4:0c:0e:
         8b:0e:87:7a:cd:b4:a0:30:c1:d6:ba:b1:a5:c3:d5:8d:2e:91:
         78:33:dd:cd:23:ac:43:af:49:ea:0f:b2:b4:c7:74:2e:c6:f0:
         7a:12:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org