Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/ccfee8b3-bb39-3547-ad9e-ae2f025a92cd.roa
File:                     ccfee8b3-bb39-3547-ad9e-ae2f025a92cd.roa (raw, json)
Hash identifier:          8ByXmCaBuJseIV/xWmrpkYrXCEJixMr57kgcm0fKidg=
Subject key identifier:   E3:E6:32:08:10:95:AC:9D:0D:1E:6D:F2:72:58:1B:37:03:D0:91:65
Certificate issuer:       /CN=a76bf35a-3814-474d-acdf-c225c790ed7d
Certificate serial:       010D0C9F43285845612865BE104E52A45B6614E0
Authority key identifier: 08:B3:F0:5B:C8:38:CE:D8:DC:B8:9A:E0:17:93:61:68:7C:50:58:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/ccfee8b3-bb39-3547-ad9e-ae2f025a92cd.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     395567
IP address blocks:        199.193.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:65:be:10:4e:52:a4:5b:66:14:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76bf35a-3814-474d-acdf-c225c790ed7d
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=23f75c69-a52d-4b1b-8c13-c261f6a55910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:4e:7c:6e:c1:d0:15:e8:9c:b0:2d:3f:a3:
                    81:ab:e0:0b:a2:2c:03:d4:7f:bb:59:7d:f6:0c:c6:
                    61:7b:12:a0:56:6b:53:ef:9c:6e:15:18:e3:f3:27:
                    63:c5:d8:d0:ed:7d:04:74:da:7d:ae:15:90:7b:b2:
                    33:3b:03:6a:f9:11:2f:4a:e0:ca:ee:4e:2e:41:bf:
                    59:f6:51:63:7d:ec:56:8a:ea:97:a8:27:33:aa:91:
                    3b:d8:48:0f:f9:20:7f:3b:bd:ab:66:79:b7:a1:04:
                    84:69:b8:e8:a9:97:b2:2d:fe:57:fe:2e:a0:4a:20:
                    cc:6c:71:d3:56:1a:f3:ed:16:67:df:ad:0d:f1:32:
                    37:98:58:ab:28:44:42:3e:0e:a1:c7:d9:08:6d:92:
                    67:81:04:e6:1b:44:3b:b5:bf:6f:cd:97:7f:5b:42:
                    a3:71:2d:80:5e:09:ae:88:d8:b4:26:64:98:40:31:
                    c5:cd:f6:9d:a3:bc:2b:b7:25:58:bc:47:1d:cd:cf:
                    53:d9:cc:92:e7:a7:9b:c9:3b:82:2d:e7:0b:34:71:
                    14:c2:bd:9d:e0:60:d1:0f:b1:45:7e:b4:7c:98:9f:
                    ef:5a:d8:6b:04:2d:03:19:c1:ea:c8:d0:04:a5:8f:
                    0e:aa:53:28:bc:d4:17:60:75:0b:ba:32:dd:8f:6c:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E6:32:08:10:95:AC:9D:0D:1E:6D:F2:72:58:1B:37:03:D0:91:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/ccfee8b3-bb39-3547-ad9e-ae2f025a92cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.crl

            X509v3 Authority Key Identifier:
                keyid:08:B3:F0:5B:C8:38:CE:D8:DC:B8:9A:E0:17:93:61:68:7C:50:58:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:c2:fa:bc:4f:d8:9f:74:8f:c0:4f:43:01:eb:5e:97:1f:
         00:65:b3:68:64:76:3c:7e:da:de:8e:bf:a8:3b:82:29:68:13:
         ca:a5:c3:43:43:c0:29:fd:9a:9d:cf:81:16:95:c2:e9:43:c8:
         77:b8:e8:41:7f:ca:b4:02:28:88:03:53:00:8a:2f:6d:18:62:
         30:28:25:a5:b8:6f:6d:45:d8:b3:5d:50:20:ec:f3:4e:d4:3e:
         23:50:78:ac:9e:ae:7a:a7:3a:79:2a:a1:06:bc:c0:b0:fd:16:
         b4:66:4d:c1:a3:c1:30:b5:63:73:ce:fa:5a:36:97:c0:4a:05:
         1b:3b:6c:9b:55:ea:af:ec:03:2f:92:0f:4d:bc:23:55:70:ad:
         5b:f0:55:f3:c6:f2:2b:5b:8d:5c:46:bc:ab:8c:1a:1d:2c:f3:
         90:26:73:93:cd:af:11:85:6f:91:63:de:d8:85:4d:ce:75:a0:
         ce:d6:d9:d6:ae:d2:10:bd:ec:4d:1f:ac:a2:42:f4:cf:0e:6d:
         d2:ba:dc:3c:24:c3:72:62:2e:2c:96:d3:e5:56:98:12:22:d9:
         58:bd:1e:31:22:06:09:75:b4:19:f2:b7:ba:bb:56:08:50:72:
         4a:43:52:e2:f4:c3:a5:ad:5e:c7:df:50:e0:59:27:52:b0:20:
         d6:ba:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:45:13 2024 by rpki-client on console-fra.rpki-client.org