Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa
File:                     b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa (raw, json)
Hash identifier:          89luLsjppjmHD+kwPL/ECKYMFAtkn76/PYNWSx8LLGM=
Subject key identifier:   34:BF:B3:45:E6:03:32:47:AE:38:DC:EF:5D:F4:DD:76:73:D7:3B:88
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584561285E4AF3EF60AA640D6D00
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     3676
IP address blocks:        198.49.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5e:4a:f3:ef:60:aa:64:0d:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=5068ef23-5b5e-4a6f-bcbc-8860ca650911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:b5:c4:6f:81:7f:55:a4:c1:a0:8f:c5:e7:
                    f1:e9:42:5d:9e:8f:ac:6a:15:70:6f:f6:bc:57:e5:
                    f0:37:c4:fb:4d:b8:73:0f:e4:97:6d:fc:dd:ed:fc:
                    e0:ce:1c:1b:83:ec:54:d6:f8:c9:87:7f:c9:4d:14:
                    31:a4:5d:73:5d:e7:06:e1:9b:cd:a7:48:da:06:45:
                    49:87:20:d2:a0:f5:7b:18:4a:bd:45:a0:97:5b:5c:
                    0a:c0:3e:c6:63:10:0b:fb:91:1c:fa:44:72:80:17:
                    90:a0:f0:f9:04:73:8a:04:f4:20:d2:44:48:ce:20:
                    58:79:29:53:af:db:c9:4f:52:80:36:1d:66:60:d5:
                    4e:cc:20:5e:e8:e0:a2:94:4d:10:b6:db:ac:dc:c6:
                    4e:bf:37:30:94:74:10:1b:d9:26:2c:b5:8a:c3:16:
                    34:de:0a:d2:b6:64:ef:89:57:84:ff:95:84:d6:77:
                    8b:24:71:0b:fd:0f:36:57:80:72:5c:b1:c1:f1:ab:
                    aa:7d:e5:92:16:f5:98:a4:fd:ce:a6:55:9b:c1:3c:
                    77:a0:e4:16:9f:e8:6e:63:2a:86:ef:e8:65:ff:71:
                    e4:da:a6:d7:cf:fd:09:2c:5a:44:8f:28:4a:af:a9:
                    4e:d0:9a:6b:17:af:48:b4:fd:f9:51:36:76:6b:40:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:B3:45:E6:03:32:47:AE:38:DC:EF:5D:F4:DD:76:73:D7:3B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:32:43:fd:e2:13:d5:f0:bb:3a:33:5d:fd:89:bb:86:8c:
         5f:4a:50:13:22:d9:8d:60:b8:93:61:aa:37:95:77:5b:cf:49:
         1b:55:fd:b3:67:1a:c0:92:41:2e:b7:e7:b9:f8:5b:c8:43:5f:
         cc:67:2d:92:61:25:09:ce:fe:a8:7c:a1:44:d8:c2:61:a7:1f:
         0d:23:a3:30:36:27:ef:50:8b:38:e2:a2:ee:ed:af:b0:eb:ef:
         91:f5:5c:ec:53:ef:6e:e9:82:90:60:80:e3:85:e2:27:ef:b5:
         61:36:12:4f:19:79:06:67:b2:3e:dc:a9:cd:3d:b4:04:b9:d7:
         fa:21:fd:39:74:fd:4e:6b:0a:c7:f5:b7:bd:bd:e4:bc:89:0a:
         12:4b:ef:30:91:d7:90:d8:8b:9f:2c:f1:a0:4e:1a:84:71:93:
         73:c8:d7:80:66:d9:95:b4:01:62:d2:e0:e1:1b:9f:e6:e6:66:
         71:17:dd:c7:4d:ef:59:12:eb:71:b3:8f:07:e0:13:77:80:73:
         19:4d:ce:29:ec:0c:33:8c:d2:4f:3c:fc:03:38:af:e7:9b:7f:
         7a:7f:45:8d:8e:1e:70:71:33:21:00:16:8a:1c:ed:9f:a2:87:
         e4:60:9b:10:57:73:44:6b:44:ef:d3:cb:a7:f1:54:49:fd:76:
         d8:5d:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:30:54 2024 by rpki-client on console-fra.rpki-client.org