Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e72e1e93-f083-3f46-8dc7-5149fe213908.roa
File:                     e72e1e93-f083-3f46-8dc7-5149fe213908.roa (raw, json)
Hash identifier:          3JsmIoNlxXIBUuUDkV49y5I41JR07CYJb9e0QIPqwEk=
Subject key identifier:   65:B0:E9:86:D4:C1:A0:95:79:77:6C:B4:3F:64:CC:30:A1:DD:7D:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F9FABB16E99C2DDF6C512700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e72e1e93-f083-3f46-8dc7-5149fe213908.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     206092
IP address blocks:        199.115.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:bb:16:e9:9c:2d:df:6c:51:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=a0feaeee-fe20-4886-99d5-ae1ba92b4399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:1f:e3:54:7e:1c:4f:7b:e1:d2:13:77:22:
                    4d:ea:f9:19:ba:f5:c4:ca:66:c0:d8:91:87:72:e9:
                    47:e1:ac:52:d8:96:0d:91:ea:85:aa:7b:1f:f7:02:
                    ec:22:75:d8:c8:be:22:46:43:9f:39:f7:23:8c:7f:
                    28:0e:cf:64:2b:cb:b8:17:13:16:c9:97:be:a6:fb:
                    9d:37:70:0b:13:3c:27:4d:28:43:0e:c5:4a:df:3a:
                    eb:3b:34:2c:28:11:02:72:d1:9e:82:6d:e9:c0:b0:
                    4e:d5:55:96:18:48:1a:8e:d4:80:ad:09:2a:45:c1:
                    b4:43:4d:81:8b:a5:fa:ed:60:b1:da:c8:54:82:79:
                    a7:59:88:dc:f3:b1:9f:fa:51:3f:7f:b5:a1:e3:7f:
                    7c:44:85:d4:36:17:03:75:e6:e6:cb:c0:9d:e0:94:
                    33:df:be:b1:1a:b5:d1:d3:99:69:5f:49:e2:23:7b:
                    be:cf:aa:41:a0:aa:6f:ea:7f:50:ea:20:3d:0f:7d:
                    59:34:ef:fd:ff:ae:0c:d4:cf:8c:0c:34:0d:d9:06:
                    ba:34:07:55:d9:81:dc:cf:64:6e:cf:64:d2:14:32:
                    4a:49:d4:1d:4f:b4:41:cd:2f:09:35:b7:01:46:ec:
                    e0:22:01:6c:8e:aa:41:c8:97:fe:18:4d:24:ca:c9:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B0:E9:86:D4:C1:A0:95:79:77:6C:B4:3F:64:CC:30:A1:DD:7D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e72e1e93-f083-3f46-8dc7-5149fe213908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:21:4d:94:28:b3:8f:f5:8d:f0:1a:55:c4:ac:6a:ae:b1:
         46:89:3a:35:01:1f:44:7b:7a:c2:71:95:b3:c0:60:c4:38:3c:
         53:cb:06:e8:80:f4:80:cd:6b:69:90:53:c8:cb:94:12:fd:e9:
         b8:74:12:17:e8:ef:a5:4e:fa:41:8c:6b:08:58:a4:ca:82:1d:
         39:8d:22:ae:59:8b:2d:85:41:fd:68:f3:fa:55:8c:b5:ad:48:
         29:a1:8d:81:a7:de:2e:b0:28:49:f6:c8:c6:5b:62:95:6d:03:
         9f:9b:94:a5:8c:ea:15:de:0e:97:5f:a6:f2:61:05:60:e8:99:
         f3:e5:ed:f8:3c:8e:3c:5d:41:41:8f:b5:a5:85:e5:f0:25:91:
         dd:3f:e2:a8:85:47:e5:30:19:db:6a:91:52:f2:32:9a:92:f3:
         81:e4:39:a2:47:d6:fa:77:dd:a3:0b:9e:15:50:3c:bf:36:25:
         9a:a2:f1:32:ad:70:60:ea:1e:8a:f7:81:bc:87:dd:0c:f7:71:
         3a:e7:b9:fa:bd:91:cb:ac:82:e1:6f:9d:5d:4a:ad:34:4d:97:
         81:05:c0:ae:b9:d0:59:71:2d:06:83:3c:c6:d7:1c:a2:07:70:
         d9:88:bd:1d:d3:85:97:31:40:e3:79:7b:47:47:cd:fe:70:16:
         39:21:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:29 2024 by rpki-client on console-ams.rpki-client.org