Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa
File:                     d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa (raw, json)
Hash identifier:          UM6A0yQ7Df7JYmlQWU7wPIbdC/2Lt3V9HHRbt0P+IIo=
Subject key identifier:   DE:E9:C4:36:B6:6A:16:3C:BA:45:91:C4:05:1C:94:C0:16:3D:E8:F1
Certificate issuer:       /CN=2d723287-d624-4178-939e-a7d8be3facc5
Certificate serial:       010D0C9F4328584561285E34BB593A35FB6CE5A0
Authority key identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     49544
IP address blocks:        199.27.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5e:34:bb:59:3a:35:fb:6c:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d723287-d624-4178-939e-a7d8be3facc5
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=d97f8676-2156-47e1-997b-de0d1d58d355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:e1:19:a1:77:48:52:a2:8a:c4:cc:27:d4:
                    a7:d7:47:a7:52:09:fb:81:39:b3:43:a7:3c:14:d7:
                    73:c6:9b:55:68:86:43:2a:c7:73:57:aa:bb:d3:11:
                    cd:2c:26:fa:d4:cf:9f:e4:2d:d1:fe:10:8a:00:4e:
                    c4:44:37:0b:be:56:6c:9b:9d:af:39:7b:01:e6:75:
                    5d:54:2f:f3:2d:8e:df:d1:96:2f:89:5e:ce:70:81:
                    bf:94:ed:8d:f5:98:5e:a0:3c:40:ad:14:5c:3e:1e:
                    a0:b5:18:ac:a6:a2:f2:a9:0d:b1:31:04:b7:1b:e1:
                    09:4b:08:c4:09:d3:4b:14:af:1d:d9:dc:e2:cc:50:
                    98:be:67:50:1a:18:36:30:a3:9c:f0:48:2b:65:63:
                    9d:54:f0:1d:26:16:e1:07:14:7e:04:d2:46:d8:0e:
                    3a:7b:0d:68:21:c8:a0:bd:46:7a:97:52:c4:18:ab:
                    af:0e:9e:d9:10:a7:45:e6:d0:ed:81:d2:58:d5:ea:
                    9c:b3:6c:7e:ec:40:d2:f5:f7:db:d3:0b:3e:1b:d9:
                    69:d7:37:95:76:94:2b:96:d5:c1:71:2b:8a:d5:e9:
                    a4:b7:0d:a3:d1:63:93:0d:ec:69:bd:d2:6f:c7:70:
                    70:5c:71:70:6e:60:36:c9:bc:eb:37:a0:7e:a3:95:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:C4:36:B6:6A:16:3C:BA:45:91:C4:05:1C:94:C0:16:3D:E8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl

            X509v3 Authority Key Identifier:
                keyid:60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:f0:b2:b4:51:d0:ac:d3:d6:0d:c8:91:ea:bb:06:19:4e:
         82:37:3e:e8:2b:b7:1a:dd:90:ac:9a:e5:59:b8:e0:1d:6d:61:
         d7:da:e6:b5:a9:f1:81:47:29:af:e6:35:bf:6c:15:23:f0:4c:
         d9:d5:ce:f4:5f:0f:12:e0:a0:78:69:84:df:aa:ed:4e:79:d3:
         50:2d:7f:65:db:07:b8:77:3a:bf:4a:a2:f2:b0:60:32:bb:0a:
         b4:ed:3c:88:db:d2:f2:0f:88:69:66:46:be:c4:64:c6:b3:21:
         af:da:eb:7e:d4:9c:76:97:a8:9a:59:79:29:27:c4:a4:ae:3e:
         a4:a1:f4:89:c2:92:c7:ea:1e:da:e2:fb:c5:8c:d7:56:52:71:
         d0:fa:e3:34:76:57:1e:da:7b:e5:eb:a4:bc:b2:ce:8d:57:e3:
         b1:dc:a9:f0:8f:45:a9:64:17:9f:77:4a:d7:96:86:c0:a4:8d:
         1a:a1:91:0e:f1:28:8f:87:0e:f6:a4:cf:1c:82:73:48:66:bd:
         ad:5f:8a:2a:e2:c7:8a:12:23:32:9d:b2:43:22:42:4e:cf:91:
         35:f6:8f:04:68:03:cf:80:12:31:08:cc:26:96:22:02:71:ed:
         0c:64:15:45:60:d2:e2:11:e6:01:f6:74:4a:6c:92:20:36:d8:
         da:91:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:33:06 2024 by rpki-client on console-ams.rpki-client.org