Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
File:                     fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa (raw, json)
Hash identifier:          3h5NMDWg4Kh8dOYmft+a25MAfphj9zJVd7m/NWsaj90=
Subject key identifier:   5C:6C:32:19:C4:AF:12:55:64:D2:9E:69:7B:23:BE:AF:59:B2:9E:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEA896754BC01B6E3F700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:ea:89:67:54:bc:01:b6:e3:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=becd015a-57fa-442d-91c2-76eabbc98e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:c6:e7:2e:29:26:b2:ac:36:f8:3a:40:41:
                    82:e4:55:ad:c5:4e:79:c5:cf:b7:d3:b4:a4:85:5d:
                    76:3b:73:f3:98:f4:5d:da:ea:a6:b6:a9:39:bd:26:
                    bd:1c:8c:c5:bb:d8:f6:df:07:d2:d7:f5:75:17:dc:
                    ae:01:bb:c6:d7:05:40:cd:47:c8:45:f8:4e:eb:34:
                    f1:e2:e4:48:2b:a2:66:83:2f:ff:c8:0d:73:d6:88:
                    37:e3:78:70:48:79:c1:da:78:a0:bc:30:7c:8b:87:
                    14:42:74:87:16:74:f8:66:b9:90:75:a7:cb:32:bc:
                    19:aa:a4:6c:17:09:50:3c:d4:fb:12:e1:17:5e:94:
                    65:29:25:ac:b7:54:83:01:c0:a3:c7:b7:09:2e:4a:
                    93:4e:00:98:83:8e:b7:02:6f:d1:99:b2:4d:51:77:
                    e7:06:5b:53:0a:19:1c:53:2a:19:e2:d4:f7:0e:7d:
                    c9:e5:75:f2:22:47:46:e5:3c:fb:24:27:07:53:37:
                    a8:19:4d:1b:ae:90:92:92:73:28:c8:c9:dd:af:71:
                    31:a6:f9:0e:1f:08:aa:9c:5c:62:13:bd:e3:30:d4:
                    70:31:0b:aa:f3:4b:4d:52:a7:a5:f0:5f:f3:00:fe:
                    38:88:2b:ab:40:e8:e9:67:3e:a1:f7:a3:a4:90:70:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:32:19:C4:AF:12:55:64:D2:9E:69:7B:23:BE:AF:59:B2:9E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:72:31:f2:f3:fb:ea:01:e3:59:92:0a:d0:7d:3a:db:17:
         3b:9b:1a:39:95:d6:56:80:17:a6:ee:dd:6d:5d:a3:2f:3f:96:
         ff:e9:9f:ce:2f:ee:ad:73:f5:fb:40:04:bc:74:64:c6:c3:18:
         61:9d:47:e4:eb:42:0b:a9:6d:f1:c6:dd:18:01:d4:20:2a:f3:
         1c:bc:30:a6:63:07:95:32:08:a0:06:ca:45:db:72:34:d2:36:
         74:cb:4e:66:ca:58:09:06:f4:83:84:ed:88:80:64:95:72:fe:
         c8:bd:aa:69:79:a3:23:bc:bf:1e:a2:9d:e2:79:e4:55:57:3d:
         66:36:da:69:ca:33:50:dd:43:36:5f:34:56:0a:e2:1d:71:ae:
         ef:f8:bb:b9:38:9b:17:c0:66:09:23:4c:1c:88:b7:9e:21:de:
         a9:be:e8:af:14:c9:58:5d:a0:62:02:02:2a:05:05:1a:2f:5f:
         52:f6:17:04:76:d8:21:a0:9b:82:24:2d:51:64:07:27:83:17:
         be:35:d5:5d:66:a8:19:26:69:61:ef:e4:8d:25:4b:a5:30:5d:
         89:e1:1b:90:7b:c9:7f:fc:71:18:92:33:2c:e7:c0:3c:fc:e7:
         fe:32:15:e6:1a:7d:f1:5b:39:98:ef:da:77:60:36:7e:d7:04:
         d8:8d:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:48 2024 by rpki-client on console-fra.rpki-client.org