Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa
File:                     cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json)
Hash identifier:          +5agDjpRJJpWrL0iG9EZhdsRiCplJ5txJCwLHH1tO6A=
Subject key identifier:   CD:6C:E1:AB:07:1E:95:43:00:3A:B2:C5:85:50:1E:FA:C1:39:94:03
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858457FDDCEF474F580759BD985B0
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        192.161.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:ce:f4:74:f5:80:75:9b:d9:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=07e85f34-0f27-48b3-a215-de06858ff7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:36:c7:27:3c:f1:f1:6f:84:8d:e3:1f:b6:
                    43:0f:3d:a1:21:e2:f7:93:33:c6:64:88:b3:56:33:
                    96:f3:29:2a:76:9e:74:48:ee:38:0c:44:28:be:ed:
                    8f:65:c5:a3:1e:22:f2:48:29:69:e6:78:cd:bc:2b:
                    77:c4:dd:e0:04:6e:b0:ce:39:47:da:d3:cb:b1:fe:
                    79:01:3d:af:cc:50:b8:42:fa:d0:66:2e:a0:90:cb:
                    e6:6c:31:01:d1:ed:9e:f8:0b:4c:13:5c:9f:7c:12:
                    de:5e:d6:51:82:dd:2e:9f:90:2a:1b:4c:e9:ad:71:
                    a4:0a:e1:b6:38:4e:2c:db:c0:a7:56:73:a0:fc:a4:
                    3c:22:49:44:a5:27:8f:d4:99:1b:67:a0:eb:2c:36:
                    8b:33:aa:0c:ea:f6:c9:8e:5a:8e:9b:c9:00:3d:1b:
                    37:4c:cb:32:2a:8f:3a:7e:a9:1d:c1:0f:1e:d8:5f:
                    91:ca:84:db:70:23:82:82:5d:da:da:05:9d:b5:6f:
                    ac:f8:15:ed:75:9c:a1:4a:a4:19:0e:03:ed:db:f3:
                    33:89:2f:df:c2:02:2b:b7:02:d4:97:61:37:7c:62:
                    24:7a:51:81:81:e4:a7:79:4c:a1:8e:a9:43:a5:d4:
                    a1:89:03:ca:a4:75:cf:ff:82:c5:ef:ec:81:6a:ae:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:E1:AB:07:1E:95:43:00:3A:B2:C5:85:50:1E:FA:C1:39:94:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:c2:e5:bc:c4:f1:e6:a8:a9:1e:7d:55:0c:b5:1c:f9:6b:
         7f:35:3d:86:f3:ca:86:e3:8b:39:41:c2:c8:5b:56:d0:b6:f6:
         69:f1:c4:fb:66:8a:24:f0:36:31:8c:3b:de:a8:fc:84:56:48:
         d4:da:6a:e9:7a:a5:22:7a:67:1f:4a:92:30:a5:74:a8:af:f5:
         2e:de:93:5b:cc:e7:2a:f5:28:d2:6e:fc:85:df:4c:bd:42:99:
         bd:fd:80:6f:c8:c8:44:8e:18:7f:2b:b9:f1:22:20:02:45:e4:
         48:10:0b:cf:48:85:02:89:bd:a7:17:ee:9f:0d:06:f1:b0:3d:
         70:5f:b4:9d:18:16:27:7b:25:11:db:07:e0:9d:2c:c0:5d:9f:
         9d:4f:a2:91:ae:ed:3b:78:63:8c:1f:15:d8:9b:b3:cb:29:5e:
         79:b4:8b:cb:a2:72:da:55:0a:34:2f:aa:48:25:1f:2f:75:3c:
         28:70:71:85:31:9e:11:d8:c9:df:39:95:ca:c3:0a:24:de:c6:
         38:98:1c:e7:b7:db:12:a2:4b:04:9b:e5:3c:b2:97:fa:7c:92:
         8c:2d:ea:ef:a5:fc:f6:20:00:55:8b:23:1c:b5:30:73:9b:30:
         94:63:93:3f:01:de:fe:6b:ce:96:1c:c6:5f:cb:3a:de:1d:5a:
         4e:b3:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:11:20 2024 by rpki-client on console-fra.rpki-client.org