Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File:                     abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier:          oZNiy609g9S4gqlBSZe8gLryyGzoiKxETJcuuUsUOzY=
Subject key identifier:   7A:48:71:99:2E:5C:DF:26:43:CF:29:9E:62:6A:FB:E6:51:34:C3:0D
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584566BDAB5F17C8792095D18BD0
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     395287
IP address blocks:        192.104.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ab:5f:17:c8:79:20:95:d1:8b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=69937c64-3e4b-4da0-8bf3-adc899d5716f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:e3:b4:1d:0f:98:a3:5c:1d:1e:87:c6:4f:
                    5d:1e:33:bc:97:ca:42:82:1a:cd:ee:f7:2d:59:4d:
                    b0:07:e6:6e:02:2c:12:85:a2:b1:10:f4:f1:91:8c:
                    47:d8:c8:6f:e1:dd:76:72:87:6c:ab:6a:7a:4e:60:
                    88:74:51:7f:9d:c2:29:9b:e8:d5:02:04:6f:b9:16:
                    96:51:fd:86:95:27:75:3a:6e:f4:b1:af:4f:42:b9:
                    69:9f:ef:ab:fe:8c:98:b9:31:d6:e4:f4:92:19:9f:
                    a3:6c:ca:5b:61:47:ef:39:f1:22:78:1e:dd:44:12:
                    c5:45:32:72:d8:50:e9:19:bb:80:26:7f:d9:df:b9:
                    10:df:5d:2c:61:2f:74:b4:1a:e7:74:94:86:94:af:
                    a4:46:11:70:56:38:e5:62:26:bc:bc:d1:62:78:99:
                    97:4b:ba:0e:7f:04:16:33:36:4e:9a:55:57:8b:ba:
                    bd:6d:ba:f2:ec:91:14:35:f5:d8:8d:c8:09:1c:5e:
                    c3:92:ea:03:5e:2f:d1:b0:4e:4f:3e:5e:14:24:ac:
                    b2:e5:84:1e:66:61:e7:17:7a:d3:1c:80:ea:51:b9:
                    4a:e6:74:c5:fa:56:62:ac:46:68:6c:e5:4b:f1:17:
                    68:97:d0:6e:8a:1e:78:54:67:40:6a:07:43:cf:df:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:71:99:2E:5C:DF:26:43:CF:29:9E:62:6A:FB:E6:51:34:C3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:34:41:7f:bc:88:43:5c:ba:96:6e:15:97:56:6a:fe:b4:
         a9:fb:9c:bb:12:45:a0:a4:f8:c7:35:49:24:ce:2e:8c:5e:85:
         c0:7d:24:41:55:01:b8:c3:5b:fe:13:e2:33:75:77:ce:24:46:
         63:ae:42:f9:29:c8:57:0c:38:e4:c0:5c:dd:13:45:56:86:e5:
         20:1a:ba:cf:b9:47:4e:14:b8:94:ce:6b:6f:ba:42:8e:7b:7c:
         ba:84:62:f6:be:7a:2e:16:46:e0:08:37:72:74:64:7c:63:76:
         a8:86:0a:bc:e0:24:8e:72:e9:96:37:9f:e5:6d:b1:d1:9d:53:
         58:d5:e3:92:38:a0:3c:27:e2:77:1f:7f:ee:ef:a5:e7:e5:ca:
         16:bd:67:5a:43:56:20:c3:3b:b1:48:a2:ee:0b:84:10:fa:da:
         a7:ea:08:a9:a4:80:d9:b6:08:a4:13:1d:bc:dc:84:de:82:cd:
         63:e4:05:57:1b:bb:68:1e:33:0f:6f:23:28:df:25:90:b6:88:
         da:7b:f0:33:9c:e7:7b:99:40:88:1f:69:e0:cd:72:95:17:ea:
         70:73:4a:08:20:99:35:8f:73:72:26:3d:60:86:c2:56:28:d8:
         03:e4:32:1d:7e:63:e7:ac:41:2f:33:83:68:ff:d1:c0:83:0a:
         97:26:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:23 2024 by rpki-client on console-fra.rpki-client.org