Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa
File:                     502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa (raw, json)
Hash identifier:          uE5gHIsMYnKy4fk6V3YvPsrmvhCEPf3uX/DUUpxHXYU=
Subject key identifier:   E9:27:D1:47:C1:E9:04:E4:37:95:43:EB:3A:CA:81:A0:1D:13:AE:86
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584561285D63798D3A7CE9C06E60
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     3677
IP address blocks:        199.201.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5d:63:79:8d:3a:7c:e9:c0:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=9ccaef21-4f23-4f0f-8c99-9baebd0ad9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:b5:38:de:3d:22:b4:4a:e0:37:5c:85:ee:
                    67:75:26:ac:42:f0:a7:33:c1:42:0e:17:3a:af:10:
                    a2:0f:5f:31:65:20:58:2e:d5:07:62:e7:4f:04:b7:
                    5f:1f:e6:53:66:38:18:56:dd:7d:71:a0:75:1c:b6:
                    75:f5:93:4a:30:49:1b:84:da:37:be:50:af:f4:35:
                    5a:5b:ec:82:5c:6a:ff:a5:66:23:63:51:22:80:07:
                    93:32:b5:9a:4d:2b:95:ff:bd:51:b0:20:a1:ed:52:
                    77:d6:a1:10:e4:27:e5:ed:bc:dc:2f:5d:28:aa:02:
                    65:9c:fb:a8:76:16:3b:b4:45:91:40:ca:c0:d6:6d:
                    a3:47:c6:1f:1a:65:38:fe:cd:1b:ff:bf:ba:8c:5b:
                    21:af:92:39:61:32:a2:d8:1f:ac:63:76:a8:ff:e2:
                    83:9e:38:f7:51:1b:a6:b6:48:3e:3c:4f:92:d5:8a:
                    a4:92:1e:ff:72:cf:57:b0:56:f1:49:85:55:ea:8c:
                    10:b6:3f:e6:e6:68:aa:f0:52:01:97:3a:d8:02:dc:
                    55:2c:3a:26:21:9a:c8:43:75:2d:93:1f:c5:8a:03:
                    a2:fc:49:f6:b4:c1:c0:90:69:aa:3c:b2:62:2c:fd:
                    f7:99:e4:e1:d3:24:27:f5:7c:dc:b9:d5:be:2d:f0:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:D1:47:C1:E9:04:E4:37:95:43:EB:3A:CA:81:A0:1D:13:AE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:03:5a:99:33:1d:26:0f:71:f0:55:d5:b8:2f:67:18:f1:20:
         4e:3c:9b:87:47:c4:2d:45:e2:67:81:5e:3d:b6:5e:c6:11:37:
         06:f2:41:72:e5:ba:de:f1:69:6f:ee:62:58:2a:70:b2:e3:1c:
         b5:d6:12:d0:7a:63:1d:cd:75:55:0f:68:86:c3:3e:33:b0:89:
         a6:16:d0:aa:4f:fb:72:f0:4a:39:20:a6:09:5b:f5:73:ac:43:
         3e:62:4c:3e:e8:e7:e3:17:de:1f:f7:4a:a5:75:84:04:3b:41:
         05:a9:96:b9:7f:b3:57:b8:29:38:86:26:b3:84:21:33:3b:c2:
         01:b5:1d:49:f7:47:4c:ac:6a:12:b9:fd:6f:fa:91:17:6a:c4:
         c7:18:34:3e:6d:22:16:b3:a5:1b:66:48:f9:ca:70:71:3a:b3:
         52:66:ff:ed:d3:cb:ec:d3:f5:66:b7:e2:1e:56:06:f6:e2:c6:
         27:4e:41:93:22:97:03:67:49:4f:9b:3b:82:80:d3:e3:da:e2:
         7c:08:ce:9e:37:df:7e:6a:8d:c2:32:a3:a4:12:c3:a7:39:89:
         ba:7d:e6:78:a4:34:4d:01:a6:0a:bd:fc:70:f1:54:f3:b3:61:
         77:2a:29:59:dc:16:f6:57:c1:49:d9:81:36:0c:30:8b:78:d5:
         0f:d9:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:30:54 2024 by rpki-client on console-fra.rpki-client.org