Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa
File:                     0ecd999c-b3bd-305a-9ada-94796d39181f.roa (raw, json)
Hash identifier:          pIv/iy+rwv+dXC+R1dywm3vXIGs9rJhheqb1bFoAfLk=
Subject key identifier:   D8:AB:21:F6:4B:6F:1A:B2:BE:32:BA:AD:DE:71:00:44:D6:9F:E2:01
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285844FB6005244CE489C2022E1580
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     177
IP address blocks:        198.111.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:05:24:4c:e4:89:c2:02:2e:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=4426e1da-9549-4df3-a0f0-b03b9374b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:1e:6b:76:67:69:ed:47:e0:20:29:04:61:
                    f9:e8:fc:a8:db:e1:93:da:a1:4b:76:2e:44:3b:51:
                    21:71:b6:a9:41:79:1d:0e:50:67:ca:86:04:ab:2c:
                    1e:02:22:b4:d7:fb:90:7f:26:64:70:87:81:ec:84:
                    49:29:29:ff:83:ec:54:eb:bf:fe:b0:ae:fd:bf:c1:
                    aa:fc:bf:23:ac:5f:25:5f:ac:38:d3:46:e8:57:49:
                    57:cf:9f:7d:98:07:0f:47:e5:78:86:51:2c:98:45:
                    4c:03:ff:57:22:1d:c0:83:25:d8:7b:96:cd:f2:03:
                    19:7b:14:ba:09:89:0d:4e:7b:dd:ff:4d:ee:3b:12:
                    b7:99:f5:9d:93:f7:ef:a2:c3:57:a2:e2:ed:31:67:
                    ab:a7:a6:08:40:ca:19:5d:6d:4b:00:f7:5b:76:24:
                    39:ce:6f:6b:2b:ea:bf:ad:bd:96:0d:39:34:e5:75:
                    60:00:8a:a6:52:d1:6e:68:b2:86:20:5f:6b:a6:b2:
                    88:49:10:9b:2b:62:97:00:88:ca:99:4a:41:9f:17:
                    8e:f0:d1:4c:20:c3:a7:2c:6d:1f:6f:5c:14:95:56:
                    0d:49:c9:3e:a0:b0:f2:ac:e4:51:88:9c:7c:b2:12:
                    60:83:36:a0:08:73:14:62:dd:19:ac:51:36:ae:26:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:21:F6:4B:6F:1A:B2:BE:32:BA:AD:DE:71:00:44:D6:9F:E2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0ecd999c-b3bd-305a-9ada-94796d39181f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.111.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:b7:c4:c7:c5:03:c5:82:69:69:95:e0:a7:f7:2a:fe:da:
         c4:45:18:f0:13:d8:3e:51:6d:5e:c0:15:e4:bf:cb:91:9f:99:
         10:6b:b4:48:25:98:d6:b5:41:ab:cf:21:26:52:7e:00:7c:37:
         dc:0e:61:01:3b:66:2b:c1:29:f1:d4:83:10:20:9a:c7:a1:87:
         eb:ab:79:f4:58:41:23:62:e6:25:7e:71:b4:60:57:89:e4:5b:
         b8:a5:07:70:a9:bd:db:8b:e5:b7:ba:be:ee:a4:99:77:e1:d2:
         f7:d0:f2:53:70:12:3a:be:f4:05:d3:89:c8:5a:a2:2b:f0:29:
         b8:4d:ed:92:e6:4e:b8:9f:7b:72:26:72:f8:6a:16:cf:1b:fd:
         a0:27:dd:89:85:c5:bf:89:d6:e9:c4:86:1c:58:c9:26:b9:23:
         d6:6b:52:7b:9b:a2:54:ba:8f:7c:00:0e:11:22:3a:2f:f3:21:
         30:42:0f:df:73:22:9c:db:f0:a9:2f:a6:a3:ac:9e:f5:a1:87:
         50:5a:19:a1:23:d4:49:69:8c:e1:98:31:55:5d:64:91:26:54:
         ab:81:b4:08:3a:95:36:75:17:15:33:50:31:61:b5:1f:9d:e7:
         a9:d3:db:71:58:24:16:f6:0f:df:63:ed:a1:48:06:c0:36:07:
         d3:5d:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:57:20 2024 by rpki-client on console-fra.rpki-client.org