Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
File:                     13ee133f-dc62-3b68-8b17-8b97746c86e8.roa (raw, json)
Hash identifier:          1rSzsq1pqEpQI4J+vfxTA09Ml9U41YnIN/z8upZ48f0=
Subject key identifier:   C5:3A:8A:D2:D9:0B:78:D8:72:EB:97:5B:E2:13:CB:38:A8:AA:06:C9
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858450EEACB1EF6DC39FB20EDD600
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     400754
IP address blocks:        198.71.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cb:1e:f6:dc:39:fb:20:ed:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=d0818074-8659-4a6f-b719-69bc8161b67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:b8:3c:d3:e6:0b:2b:24:0d:3a:4c:17:de:
                    ed:10:fd:1a:4b:b8:42:d9:6e:52:c7:ba:e0:20:42:
                    7e:e5:71:b2:86:de:1d:7d:9e:86:99:46:97:37:ba:
                    c6:db:2a:5a:6e:7a:cb:52:99:b9:4b:c1:d3:61:b9:
                    8b:f4:92:69:46:ff:15:d8:d4:40:6d:f3:87:2e:18:
                    9e:66:e0:20:5b:54:59:21:7b:43:e9:7c:7b:70:5d:
                    d1:98:ef:e5:7c:08:7e:7e:7e:af:67:e1:94:07:11:
                    4a:5c:dc:45:df:ef:d2:d9:12:a4:88:0d:df:04:63:
                    b8:ae:d7:f3:9c:20:89:e4:d7:3b:09:db:40:77:08:
                    41:f8:0e:e2:f4:bb:98:95:bb:29:cd:87:c1:c5:a4:
                    e5:67:73:97:b8:61:c2:c3:5b:0f:98:6e:49:1a:67:
                    f8:e1:a2:3f:bd:aa:7f:af:5c:04:be:31:36:df:c4:
                    da:40:24:97:2e:d5:78:3d:e3:43:3e:df:8a:9f:5a:
                    09:06:10:07:c2:63:5d:fc:1d:f6:a7:33:4a:10:f5:
                    97:55:b8:64:eb:28:9c:96:9a:3a:8b:e1:fa:d1:0f:
                    17:1a:49:fa:1a:b8:4e:0f:46:b5:20:a7:fb:38:15:
                    ed:a4:92:b3:63:f2:2c:5a:15:bb:d4:76:e8:7b:46:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:8A:D2:D9:0B:78:D8:72:EB:97:5B:E2:13:CB:38:A8:AA:06:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:66:d6:cb:60:64:12:f5:a9:bd:c7:7f:dd:b5:78:18:58:
         6b:5f:44:81:9f:a9:38:c1:fa:1d:73:7d:21:68:25:3c:89:bb:
         a9:4b:ae:f1:22:7d:1e:6b:49:01:1f:16:47:e7:56:e4:ff:8d:
         ea:bf:d0:3f:4f:fa:c6:eb:3c:18:33:25:b6:8a:8e:04:79:87:
         25:9b:e9:40:d1:f3:88:6f:fc:d5:08:cd:41:46:7d:66:ba:e2:
         8b:0c:6c:bc:b9:4a:19:eb:d8:e5:b2:ab:9f:c0:b8:52:84:7e:
         33:45:ee:8e:86:b5:11:e2:3d:1b:59:e3:e7:12:26:27:92:55:
         27:f7:46:2c:f6:8a:e8:ee:7a:a8:a7:ad:6c:ae:63:f2:70:c2:
         8e:14:a8:2d:9d:e9:c4:d2:28:01:ba:55:c0:56:ea:de:a6:45:
         30:8a:a3:c7:c5:e3:da:c9:72:72:ac:08:2e:ac:d1:cd:ba:56:
         ea:7a:ac:f9:26:83:52:9c:03:ab:22:01:4f:49:1a:2f:53:b1:
         92:97:c7:dd:e6:f1:29:e1:4a:dc:e6:85:53:c8:9b:42:b5:ca:
         27:c5:eb:52:98:1d:69:92:98:30:dd:6a:4d:0f:d0:ac:1d:63:
         79:1d:2a:97:ba:7b:97:65:14:0d:a1:3c:45:27:79:83:0d:0b:
         de:16:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:27:40 2024 by rpki-client on console-fra.rpki-client.org