Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa
File:                     d94a879f-4b83-3263-bcce-62688a17478d.roa (raw, json)
Hash identifier:          1fjzk/HKSHcAP3bl3eZf3KeqcqAJAOcPPDWJvZVTrU0=
Subject key identifier:   33:49:A9:80:24:96:C6:17:34:B8:A9:DE:38:83:B0:80:15:9C:33:5C
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F432858456C530BD8EC29D41713A1CE80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        148.163.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0b:d8:ec:29:d4:17:13:a1:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=2aca0927-6fa2-4def-a231-5d8123d396eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:47:95:06:65:d8:10:40:18:69:5e:2c:c1:
                    b4:48:34:df:3d:8a:8c:fe:fb:38:35:e1:fd:73:eb:
                    f3:6c:1c:65:ba:c0:50:fc:88:2e:c6:cf:43:86:31:
                    1e:ad:5f:18:d2:86:0b:b5:ba:1f:ff:0e:a5:eb:64:
                    16:ec:0e:14:a9:16:6c:aa:47:b9:6a:a1:c9:19:c4:
                    43:5f:3a:fe:fb:3f:a6:7f:b5:8f:ce:8e:dc:96:0b:
                    d6:43:ce:ed:c3:be:e2:f3:7b:2d:4a:9b:a4:dc:44:
                    11:8b:36:24:a1:05:68:3b:4b:c9:0d:4c:f7:cb:f8:
                    e8:75:b9:be:73:52:e8:4d:45:a0:05:7d:d2:f0:e5:
                    24:a0:cd:07:74:96:69:a5:0b:28:d7:19:5d:d3:3d:
                    1e:cf:10:b1:38:34:5b:ee:df:ec:0b:eb:e4:f2:29:
                    34:2c:b2:0a:eb:da:ff:f1:a2:90:3c:f3:53:62:ab:
                    bd:47:a1:af:81:f3:01:e5:3c:3b:0e:86:67:9b:93:
                    af:45:db:03:36:d1:6a:a7:73:29:7e:a1:59:91:85:
                    75:c1:46:80:f8:e4:c6:69:1e:57:a5:4f:9e:c8:ce:
                    b7:21:a9:b0:02:88:19:d1:c0:26:ff:30:1b:3f:19:
                    73:58:db:c5:40:a5:e1:94:45:24:87:93:01:1e:eb:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:A9:80:24:96:C6:17:34:B8:A9:DE:38:83:B0:80:15:9C:33:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:67:38:6e:2b:97:ea:97:d1:8a:a8:87:a5:30:43:8c:3e:fa:
         96:c4:02:14:e7:8e:0b:ab:14:a3:13:52:3c:72:88:4c:af:bf:
         19:80:e3:55:b5:a3:90:3b:2e:83:f7:96:fe:92:8e:20:8d:eb:
         2d:55:f6:84:5e:1f:8c:21:ea:c4:f6:1a:8b:bd:af:d1:22:1d:
         11:29:16:91:fe:62:b0:63:a6:0b:1f:67:27:24:27:20:8a:08:
         53:52:86:b2:72:29:e5:2d:8d:bf:c9:d7:f9:40:01:b2:54:66:
         19:13:62:bf:d1:3d:bb:f2:64:7d:1f:ee:74:a6:a8:fd:c5:6f:
         54:13:a6:b0:d9:23:89:32:3d:8b:af:7a:0c:12:14:13:ed:45:
         01:80:e4:a0:29:f3:b8:aa:63:d0:fc:0e:4b:8c:e5:45:26:ea:
         d4:ed:52:a4:32:bc:a6:85:d8:5f:14:16:2d:0e:f3:17:02:58:
         1c:a5:19:15:e0:c0:8b:52:e6:22:38:39:fb:f4:44:80:16:1b:
         f7:5d:ee:73:85:e3:ed:c5:83:38:1a:1b:ff:9f:3a:5f:58:7a:
         9f:c8:cf:e5:17:4b:bf:b7:6a:a1:b4:a6:0d:67:5a:b8:ab:6b:
         65:79:ee:ae:1e:d4:fe:1e:dc:fa:49:ab:49:63:c0:03:07:33:
         f2:7c:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 22:53:41 2024 by rpki-client on console-ams.rpki-client.org