Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa
File:                     94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa (raw, json)
Hash identifier:          sepTSNzzWNo0386757J2nIqsZ0bMZ2qbCEgDTktseMQ=
Subject key identifier:   75:64:B2:7F:7B:36:B4:8D:95:94:60:06:AF:24:5C:F9:E2:5B:56:15
Certificate issuer:       /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
Certificate serial:       010D0C9F432858455E5DAADAAF4F1DF7AFCFE700
Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     26938
IP address blocks:        199.47.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:aa:da:af:4f:1d:f7:af:cf:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=42be31a7-72cd-4718-9bd8-67405f4af626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:14:0a:f1:dd:92:87:34:27:1e:83:f2:61:
                    42:75:a7:3a:21:a7:7f:e8:86:33:8f:d1:08:86:cd:
                    5a:34:e4:4f:ca:db:db:85:9f:9c:31:b7:25:aa:27:
                    ee:a0:08:cd:14:8c:ba:2b:fe:95:ea:ef:97:e8:94:
                    94:49:08:d7:1f:f8:ad:45:56:5c:be:7d:a5:3c:77:
                    e6:0e:bf:50:49:1c:33:89:22:d1:05:88:5a:2d:3d:
                    fe:41:6b:85:22:6c:50:27:bd:1d:2e:4f:2f:ab:97:
                    f0:b6:52:2f:be:6b:9f:0f:52:90:75:72:dd:cc:9a:
                    f5:f7:65:78:b4:d4:01:97:df:48:6f:1d:f8:fd:f0:
                    94:09:77:4d:6b:7b:33:bf:51:6f:5f:70:da:f5:72:
                    6c:bb:c0:7c:10:ea:72:9e:4a:89:3a:04:62:af:07:
                    35:fa:89:eb:7d:10:2d:15:53:60:0d:8c:20:11:b9:
                    9e:aa:2a:11:44:02:9b:1b:16:de:47:e4:98:2c:f8:
                    c1:25:0c:86:5e:e2:a6:da:94:57:4d:72:0e:6b:e8:
                    8f:2e:0e:37:fc:18:f4:f9:fb:68:30:88:3b:b8:8b:
                    53:8b:64:b2:53:9d:7a:49:70:87:ef:91:1f:bd:22:
                    e1:a3:45:75:b1:ff:74:8a:59:9c:bc:26:94:b9:a9:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:B2:7F:7B:36:B4:8D:95:94:60:06:AF:24:5C:F9:E2:5B:56:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:d5:50:b5:19:ef:5b:12:ea:21:5c:e8:ff:ac:d3:31:78:
         6a:7b:ee:b8:b0:69:da:58:2f:b4:ae:3e:76:46:ec:18:a2:59:
         09:b7:25:e9:98:5c:37:a7:13:39:61:81:0a:69:2f:68:0f:1f:
         29:0f:d9:6b:3c:2e:3e:27:c8:fb:55:68:1b:61:0c:ac:aa:68:
         5e:ee:6f:1d:b1:46:9c:9e:8b:e4:1b:1c:9c:56:b8:6b:00:89:
         43:1b:99:94:8d:4d:b0:36:59:b8:2b:ca:17:15:a6:ec:51:fb:
         6d:5c:a6:ee:24:a0:14:2e:9f:76:30:26:e6:b3:d4:56:9d:8e:
         3e:8d:89:9c:87:32:cf:ca:01:bd:cb:6a:11:4a:da:2e:82:58:
         11:dc:52:88:23:91:5b:a0:8e:22:e7:f1:4e:5c:93:02:75:bb:
         0f:87:a8:81:31:57:e8:d9:26:e0:50:fc:6b:55:19:3f:4e:10:
         19:40:c7:30:36:33:47:bf:d5:e4:e4:ce:32:5b:5b:e0:30:42:
         12:38:89:5e:ff:2a:a7:ce:8e:d8:a0:8f:8d:20:25:15:64:a1:
         57:50:7c:77:d1:e5:4c:18:42:25:c2:ab:a6:4f:7e:c9:7b:90:
         16:56:8a:a9:35:5c:65:81:2e:fa:3f:46:29:97:21:54:24:5b:
         2f:91:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:04:09 2024 by rpki-client on console-ams.rpki-client.org