Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
File:                     4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa (raw, json)
Hash identifier:          GBiwm7d3Cv5f3EGZ2Lbqa6xJHRRVvkjadQQ5GC7PFXk=
Subject key identifier:   12:15:1F:B4:A0:4F:38:02:F6:2E:F4:B8:63:2D:5A:2D:54:EA:32:37
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285844DE0FDE85FD453110049CF700
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     396982
IP address blocks:        162.240.199.0/24 maxlen: 24
                          162.240.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:de:85:fd:45:31:10:04:9c:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=e9b8cb4a-e85f-4022-839c-e66711a19bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:13:36:9f:fa:9e:a1:28:95:4f:3e:12:ed:
                    c1:c2:5e:1e:20:f0:ff:ec:ad:6d:36:ef:d4:34:3a:
                    f5:bf:cc:93:b3:05:51:69:09:42:8b:64:0d:bc:37:
                    59:64:fd:bb:da:62:d0:45:0e:7d:d4:f5:72:6b:9d:
                    ac:60:6f:d6:17:e8:9f:75:02:22:4f:e8:23:b1:8c:
                    fe:8d:ee:9a:fe:90:0e:4b:a8:7e:92:eb:41:cb:2b:
                    df:08:7a:4c:4a:5c:0e:6a:10:03:71:40:d2:03:98:
                    5f:b8:35:ae:60:f7:93:b8:5e:76:87:6d:16:2c:ba:
                    51:ef:92:1f:11:b5:d3:10:04:fe:6f:fe:19:b8:d7:
                    c9:60:5e:54:42:a5:5b:ff:ad:0c:c1:bd:dc:57:f6:
                    96:94:37:42:bd:29:92:3f:be:14:d0:18:c0:69:dc:
                    ab:54:0c:e6:2c:da:fc:3c:92:57:e8:15:01:ca:9d:
                    e3:5e:12:38:32:38:47:46:c3:7d:be:0e:23:8d:17:
                    ca:e8:18:b9:76:54:cc:a9:56:45:de:bc:20:03:92:
                    3f:20:69:e1:c4:c8:e1:45:d8:a9:8b:bd:c8:3f:d1:
                    46:6b:49:ba:f6:99:1f:e4:e6:80:5c:d0:f8:92:df:
                    34:ef:cd:1c:f2:18:e6:89:38:c6:93:9d:1a:4a:8e:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:1F:B4:A0:4F:38:02:F6:2E:F4:B8:63:2D:5A:2D:54:EA:32:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:b7:12:53:04:12:7b:8a:62:a3:6a:56:5d:7e:f6:06:bd:
         18:35:c2:62:2e:06:a3:eb:ba:2a:3a:ad:7c:ee:77:05:1c:f2:
         8b:69:bc:52:20:44:fe:96:cf:9d:8e:3b:a3:88:71:6d:f3:14:
         57:cd:87:28:ba:22:66:c6:f4:89:13:3d:91:b6:7f:f2:94:03:
         99:1f:02:f8:09:c9:68:b7:41:45:fb:75:e2:af:0d:2e:93:22:
         b2:64:ed:52:4e:31:5b:da:f7:52:c6:f2:be:02:d5:50:dd:e1:
         14:d3:e7:24:85:af:4d:ee:44:8b:ec:8d:fa:cf:53:b3:7d:5f:
         7c:59:20:81:ee:71:99:63:ae:86:46:41:11:a4:a3:55:fb:95:
         19:01:a2:4d:d3:e2:f0:ba:8d:67:14:86:86:85:54:10:50:b6:
         7d:06:e7:f6:12:12:0b:de:9f:5c:65:02:25:9a:a7:a2:88:7a:
         e6:5e:0f:39:c5:32:d2:66:22:9e:d7:3d:b2:a9:b0:47:b0:21:
         74:3f:03:4b:24:cd:14:96:ec:26:5a:a1:6a:3f:65:54:15:87:
         2b:c9:cb:02:c1:22:cc:f1:4e:52:f4:17:2b:82:ec:1b:6e:26:
         e3:bc:ce:53:9d:29:0c:fb:9f:8c:fb:c0:4c:10:44:84:72:cd:
         0d:33:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:28:15 2024 by rpki-client on console-fra.rpki-client.org