Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa
File:                     9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa (raw, json)
Hash identifier:          7ML9jxFPwLLgVDVnK3vcxicQo7bKfnFCZT308+Ecjr0=
Subject key identifier:   BA:00:F2:1E:73:C8:56:EB:95:0C:A5:1D:B2:4C:AF:58:29:3B:A6:A9
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584563F308F18C914111E0DC3680
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     27198
IP address blocks:        149.165.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:08:f1:8c:91:41:11:e0:dc:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=1d1d1f42-96fa-44ca-8952-34c5e0d80b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:eb:d1:2d:ef:81:4f:dc:25:b9:a7:60:44:
                    8f:7f:d3:56:03:1d:7c:e1:4f:92:aa:bd:62:15:db:
                    f2:ce:e3:ff:64:6c:f0:6b:14:59:fe:22:4c:42:83:
                    10:89:93:2b:1f:c5:56:87:ec:a0:fe:2a:78:de:5d:
                    cf:2b:fa:f9:2d:c5:72:9a:4d:99:d6:0d:be:ef:43:
                    8e:8f:3d:a9:6b:16:1d:35:6c:0b:7f:a0:fe:6a:51:
                    ec:87:ee:b9:25:9b:8e:08:b7:f8:5f:75:65:56:7f:
                    d7:e3:56:ee:5a:ea:b7:71:d4:5a:98:23:a7:d9:1b:
                    89:0f:c4:ce:3d:64:0e:86:0d:32:d3:10:0e:dc:2d:
                    8c:b2:93:b3:85:4c:fd:6d:1e:21:0b:2f:b5:e5:cc:
                    64:b7:66:f6:9e:ed:d7:eb:b9:17:8e:3c:b0:1a:5c:
                    5d:c7:f4:eb:31:b6:99:73:4e:82:30:5d:0f:24:a4:
                    4d:29:b6:5a:8d:11:2f:53:cf:3f:a1:0f:ab:bf:08:
                    a2:91:de:77:08:97:06:b0:ff:54:50:93:41:3f:21:
                    21:e8:f2:20:e6:4e:9a:2b:25:b7:67:74:b1:e5:13:
                    ca:06:29:dc:6e:b9:50:82:eb:d4:80:ca:fc:17:aa:
                    b7:67:6b:b5:2e:54:cb:9a:a1:39:b4:3b:bd:7b:72:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:F2:1E:73:C8:56:EB:95:0C:A5:1D:B2:4C:AF:58:29:3B:A6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.165.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:d1:a8:bd:5f:a8:97:0a:f3:e6:eb:5a:fb:7d:85:53:71:
         7b:68:c0:95:2b:a8:1c:a1:e3:81:2b:92:9d:24:e9:4a:30:34:
         68:d7:f6:f5:1f:25:b9:1d:28:7c:e0:2f:b8:61:5a:7f:23:e3:
         a5:d5:d8:bf:72:8c:4b:f0:34:18:d3:ee:4d:97:0e:94:61:2b:
         3a:5e:e2:cc:0a:3c:92:a5:fe:c0:9b:86:3b:f1:ef:20:d6:b7:
         cb:0f:70:2c:a3:d1:15:92:90:34:4a:d2:a5:cc:af:8c:70:48:
         10:20:2a:3e:10:ed:cf:21:36:cd:b0:fe:be:7c:f6:83:5f:0a:
         b8:5e:a3:00:45:a0:87:0d:63:b7:3f:6f:38:7f:ee:15:46:5b:
         16:2c:f0:e1:0e:e5:2a:fb:f6:08:0e:2c:7a:1e:04:85:56:4b:
         b2:32:32:2e:97:cf:93:a7:62:3b:1d:b7:be:d8:ca:cb:8f:4a:
         3e:a5:6d:60:c1:52:fe:c9:f5:36:3f:29:db:94:43:fc:31:00:
         cd:7d:58:ae:43:39:4e:1c:1f:0c:d9:bd:92:b5:b7:a3:b8:f3:
         27:96:2f:e7:fd:a4:64:33:93:8b:fc:c9:32:cd:0a:33:b1:e9:
         6e:14:a2:3c:1f:ba:df:70:e5:25:bc:9f:ca:76:c9:ef:7a:f8:
         99:e9:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:52:57 2024 by rpki-client on console-fra.rpki-client.org