Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/0d083359-3e1e-399f-8178-5a1f397ceb59.roa
File:                     0d083359-3e1e-399f-8178-5a1f397ceb59.roa (raw, json)
Hash identifier:          3zP46kWuj2qaga5rhOv1dFw8S6cadq5ypkQPlrIXzPM=
Subject key identifier:   D4:73:DF:5A:51:F1:10:4F:7F:0F:E4:D9:2A:F4:28:73:D2:0F:9D:BD
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F43285845025ACF594A60DDA1B1D3AF3C
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/0d083359-3e1e-399f-8178-5a1f397ceb59.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     393383
IP address blocks:        192.64.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:cf:59:4a:60:dd:a1:b1:d3:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=3e0dc7b4-c36b-43ee-a0ef-01808abd6705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:55:5a:51:6c:13:37:4b:d5:f6:22:c6:56:
                    e1:64:8d:84:ef:4d:19:68:25:56:ab:05:19:d3:ca:
                    ec:48:53:df:25:2f:f2:d1:f1:80:03:4e:88:aa:ba:
                    39:e2:d2:fc:5b:3a:1f:92:82:20:7f:37:e3:37:1a:
                    19:38:f3:7e:62:32:68:e1:38:e4:17:8d:bd:51:c7:
                    60:d7:89:0d:91:50:21:a9:2d:3e:1e:2c:af:74:e8:
                    f3:0c:a9:37:88:bf:6f:81:fd:2f:59:9e:c5:30:78:
                    74:63:7a:ce:0b:d6:14:25:72:03:1e:ff:dd:91:04:
                    9f:67:b3:ff:10:25:29:f1:2a:5f:c4:5f:88:ed:50:
                    dc:d1:ce:df:fd:f6:d6:db:79:9f:5d:90:37:d6:73:
                    e5:51:d3:64:02:18:ab:f0:d4:2e:2d:4d:3c:16:fc:
                    96:ef:12:3f:43:27:c7:dd:ef:30:dd:ec:5e:37:9a:
                    e2:da:0d:69:84:87:d7:7e:be:d1:ed:c0:90:f7:c6:
                    5f:81:bf:fe:13:96:74:41:27:d2:76:05:0c:da:19:
                    01:8d:b8:d4:eb:a9:15:70:4e:42:5a:ea:d3:e7:40:
                    d5:d8:77:84:67:13:11:8a:c3:4a:77:fa:17:ba:4d:
                    80:ab:ce:d1:ed:f5:ad:65:15:19:e6:a0:c9:eb:aa:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:DF:5A:51:F1:10:4F:7F:0F:E4:D9:2A:F4:28:73:D2:0F:9D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/0d083359-3e1e-399f-8178-5a1f397ceb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:51:fb:4e:b0:f8:b4:93:4a:b0:87:bf:f2:86:b8:b2:48:59:
         fa:b4:30:98:09:0b:c5:14:5d:d7:be:58:a3:87:1a:f3:b9:4b:
         91:c7:e5:5d:8d:08:ae:70:0e:68:53:6b:42:e6:ab:8e:00:a3:
         fb:35:e0:50:cb:fa:be:97:c1:b5:a5:47:be:be:e5:1c:27:59:
         a9:9e:b1:18:59:c0:a2:0b:06:7f:91:6c:b5:08:ec:1b:78:4e:
         99:cb:6a:f5:58:5a:15:4c:54:1f:bb:44:16:65:ce:d4:76:67:
         60:90:22:2b:88:a0:3e:95:79:01:47:35:1e:8c:77:9c:c8:44:
         9b:9e:72:64:e4:49:06:dd:5b:ee:d0:88:29:9c:de:e1:c0:67:
         c9:b9:e3:8f:d9:1f:e7:bc:af:0f:b3:ca:81:cf:f2:73:c3:48:
         29:ce:e6:8f:d8:54:4f:d8:99:dc:8d:9a:f9:e7:8b:5a:e1:f1:
         45:ca:88:ae:37:18:98:d8:9d:e3:42:be:a3:12:40:17:b9:1c:
         cc:2c:0d:8e:9e:33:37:4b:3d:d4:ec:09:fe:76:8d:1b:db:fd:
         6f:4b:20:d1:5c:7c:1b:b8:68:1b:3a:e0:0c:f9:3e:27:cd:e9:
         24:5d:92:98:c4:52:c0:77:98:5e:5d:d4:aa:9f:77:fc:20:cb:
         c4:1c:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:10:40 2024 by rpki-client on console-ams.rpki-client.org