Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
File:                     3029e186-49b7-387b-8d82-eafc4d11072d.roa (raw, json)
Hash identifier:          2ih+71H1BJ5uz2w9wLQ0RTmJmsFT7QsIy1UvREJ4ko4=
Subject key identifier:   32:15:F7:2C:9B:62:7E:61:DB:0D:FF:91:88:48:08:E2:D7:5F:C4:90
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F432858452C51F8D36F94ED6BF2C47A40
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
Signing time:             Mon 11 Mar 2024 14:46:48 +0000
ROA not before:           Mon 11 Mar 2024 14:46:48 +0000
ROA not after:            Sun 09 Jun 2024 14:46:48 +0000
asID:                     23535
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:51:f8:d3:6f:94:ed:6b:f2:c4:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Mar 11 14:46:48 2024 GMT
            Not After : Jun  9 14:46:48 2024 GMT
        Subject: CN=8ba138a4-0ba2-4898-aaaf-05577b5aff89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:52:3d:87:52:0b:93:8f:c6:92:9e:b8:ec:
                    d1:9a:80:73:93:df:78:cd:72:e0:6a:2d:e8:3d:11:
                    a4:5a:e3:77:8b:cb:d6:1d:ad:8b:ea:96:e6:5c:56:
                    40:93:9f:69:df:88:f7:39:a2:58:c2:d9:13:c9:c8:
                    a6:fc:d5:7c:40:42:98:6c:06:e9:2f:29:eb:ed:fa:
                    2e:6a:43:97:1a:35:ad:6d:c6:5d:b7:ad:cc:d3:9c:
                    54:9f:be:ae:75:8e:f7:d2:aa:37:76:a4:09:ff:58:
                    5d:7b:97:73:36:19:32:f3:b2:ae:93:bc:09:b7:cb:
                    b1:9f:80:b0:0d:f3:70:49:d4:00:5b:7a:0b:e6:9e:
                    87:90:76:5a:b4:87:f9:4b:5e:3d:f5:52:b7:e8:d0:
                    31:a7:02:e8:85:c4:f1:92:94:30:f7:f7:5f:3a:51:
                    60:8e:0b:bc:95:b8:82:6e:e5:ba:e4:1c:78:0a:e7:
                    20:d4:85:60:98:b6:1a:19:90:56:6b:af:29:93:c0:
                    cc:c8:c2:e2:9d:cc:c9:2b:f6:b7:ca:04:ce:9c:3a:
                    15:92:3c:8c:9c:8a:28:ae:34:b2:91:99:c1:ee:3b:
                    4a:da:66:0f:f3:49:e7:4b:07:6e:a0:c6:f0:4c:16:
                    43:27:d4:13:c1:8c:24:67:e2:05:fc:d3:83:f1:62:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:F7:2C:9B:62:7E:61:DB:0D:FF:91:88:48:08:E2:D7:5F:C4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:26:ff:b1:80:15:2c:e3:55:b6:10:f1:12:0d:5b:40:d2:
         fe:d9:7b:56:b0:0e:14:55:99:a4:a7:c3:7f:18:3a:06:56:0f:
         41:b2:73:08:57:95:d6:ce:0f:54:f3:27:59:94:49:ed:ee:a4:
         04:ad:a4:65:e5:03:22:2e:66:8d:e3:fa:d3:c9:62:f3:58:3c:
         b6:15:f9:b6:ff:91:ff:3d:1f:a6:e4:37:6b:36:6d:1c:60:23:
         3e:8c:b2:aa:06:a8:0f:81:62:65:29:ff:41:c4:68:6f:47:e0:
         39:36:bf:91:0a:84:e2:33:e1:45:98:70:0f:9b:70:48:6b:c3:
         9e:60:75:9c:4d:8d:d3:50:c2:27:35:0a:31:12:fe:0d:60:cf:
         18:1c:13:08:fb:69:f8:52:f7:6b:4f:0d:dc:e1:78:67:68:86:
         2b:df:03:36:a5:90:cc:e9:83:fd:54:44:58:35:3d:ff:ad:1d:
         60:bf:db:9a:e0:43:58:81:bb:82:ff:02:d0:9f:61:c0:2b:ba:
         c3:1f:39:29:9e:c8:d0:c9:ec:50:e0:58:5d:1a:22:fb:92:7c:
         de:76:95:57:11:b4:89:86:36:5a:02:93:7a:cb:61:73:12:91:
         4a:ee:9b:f6:19:12:20:7a:19:a1:bd:48:7c:73:fe:26:34:aa:
         6c:75:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:49:28 2024 by rpki-client on console-fra.rpki-client.org