Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/422b9767-150d-3015-9850-96e5112caba7.roa
File:                     422b9767-150d-3015-9850-96e5112caba7.roa (raw, json)
Hash identifier:          e6V3G4zcYUdsy3ze2Sxj2pr/wMDNpIOZvZel477FmmY=
Subject key identifier:   1E:2B:CE:BC:9F:E0:BC:35:A8:59:71:5D:05:81:B2:EF:D0:BC:A1:55
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E609B0C0FA5D2C63FBCB100
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/422b9767-150d-3015-9850-96e5112caba7.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:9b:0c:0f:a5:d2:c6:3f:bc:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=d6259627-039f-446b-8a9d-f9b77b7227b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:78:27:23:72:8a:e7:99:d2:a0:44:00:87:
                    d3:8f:c6:eb:90:20:88:9f:ff:34:6f:4f:ea:f6:3e:
                    f0:44:e8:df:ee:2e:c3:08:89:b3:2b:9e:35:6c:3f:
                    f2:86:17:37:f5:1e:2b:95:29:df:22:f3:60:a5:6e:
                    5e:48:db:c1:c4:34:5f:0b:1c:4e:02:f0:35:6e:88:
                    80:62:63:a6:29:a0:38:76:21:f9:f1:da:55:03:93:
                    c9:ad:02:b3:cd:06:df:8d:c6:2c:d3:3b:c9:bd:c3:
                    c1:9c:81:f5:6b:da:70:59:e9:1d:60:27:b4:a4:e6:
                    7b:71:b4:c6:eb:2a:5c:19:dd:a4:fa:8f:11:25:0b:
                    a4:ca:c4:54:44:42:4e:df:d4:a2:2d:8c:2a:d2:35:
                    ac:71:10:4a:13:82:90:c7:5c:c4:0b:08:8e:11:dc:
                    38:4a:ce:42:6c:d8:d0:88:03:60:d8:31:0d:af:be:
                    91:5f:30:bc:c7:96:b7:d8:4d:df:81:34:71:94:da:
                    4d:a0:aa:e2:41:69:ad:69:b1:72:90:1c:88:78:92:
                    a4:bf:84:db:90:2d:16:51:6c:15:a0:97:58:1e:59:
                    fb:db:6c:3f:d1:06:5c:23:38:ed:8e:d4:e1:ce:fe:
                    d9:eb:d0:21:d1:a3:79:27:7f:21:ba:c2:76:10:7c:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:CE:BC:9F:E0:BC:35:A8:59:71:5D:05:81:B2:EF:D0:BC:A1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/422b9767-150d-3015-9850-96e5112caba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:dc:65:5e:17:9d:ad:ed:cc:40:a6:42:0c:49:71:85:0e:
         9f:50:b7:41:e1:6e:e6:3a:c3:bc:94:69:90:43:35:a7:af:7d:
         b1:87:e9:5a:b6:0f:9d:cc:70:6d:1d:1f:05:23:58:c1:2a:f6:
         59:e5:ba:59:95:c1:be:72:17:55:e8:16:3f:08:a8:de:44:04:
         3e:a4:ae:57:88:7e:07:93:b5:cf:bf:23:de:af:b5:59:5c:41:
         21:e1:3a:59:07:a8:a5:dd:15:50:ef:0c:b1:f5:38:55:66:00:
         e7:38:58:0f:cf:43:90:99:18:fb:4e:26:0e:2e:4c:ce:7f:30:
         bc:78:83:3d:53:dd:4d:b9:0e:bb:22:ba:c9:3c:68:39:63:75:
         df:a7:ae:96:b7:a5:8d:42:13:df:ef:3e:ce:f3:19:7f:0b:26:
         13:9a:fe:7d:64:3a:5f:e1:a4:eb:a2:1b:66:1f:c1:25:44:8c:
         fc:06:7e:2b:f2:7a:77:c4:d1:68:58:c6:ff:ec:c6:8a:41:d4:
         39:b4:51:5c:75:73:05:9b:c1:0c:02:3b:68:65:bf:ae:cd:71:
         c5:50:b7:97:6e:06:8c:4b:8d:b5:df:8b:40:df:f1:33:90:be:
         80:8e:8d:11:16:f2:b6:b3:ec:35:8c:ec:c4:0c:a9:38:18:5f:
         5f:fd:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:31:04 2024 by rpki-client on console-ams.rpki-client.org