Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
File:                     fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa (raw, json)
Hash identifier:          Avza/moknFpHy9jqp5HpBDrMHpRQgRBKVHFVS4oOpxg=
Subject key identifier:   2B:33:A0:30:79:39:37:FF:32:B9:DC:93:CC:27:AD:28:34:8D:79:17
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F43285845BD48DC34DFE99E0EEDC90700
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     10745
IP address blocks:        199.43.0.0/24 maxlen: 24
                          192.136.136.0/24 maxlen: 24
                          2001:500:110::/48 maxlen: 48
                          2001:500:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:dc:34:df:e9:9e:0e:ed:c9:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=f5b4653f-2f05-4c3a-880c-a401998edbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:14:af:65:20:59:03:55:9e:77:d3:b6:ae:
                    f8:3c:f3:d9:6c:b8:9b:f8:c1:bb:ec:d8:87:8c:d3:
                    4e:7a:19:24:a0:5f:02:68:72:3f:2d:c3:f4:b5:c4:
                    d9:90:05:49:a6:72:25:8e:32:f9:70:32:bc:25:d8:
                    4b:15:b9:41:a2:70:eb:a2:d2:f0:18:f0:9c:bc:41:
                    dd:0e:51:12:25:a3:14:84:62:47:bb:b7:8a:7c:86:
                    d8:e9:2d:dc:ed:1f:3e:25:ed:8b:38:42:39:e5:61:
                    19:03:27:57:d6:fc:9c:05:1e:9a:ea:13:92:67:d0:
                    4b:85:71:d4:1f:c8:24:44:38:6e:ee:27:46:01:c7:
                    bc:d4:f1:14:8d:63:a6:51:28:7f:f1:70:a2:fe:6c:
                    b7:64:77:70:94:f8:f4:b7:ca:da:c9:aa:c7:23:ab:
                    c2:b0:3a:90:9b:9b:42:d1:95:a1:8b:45:de:a7:dd:
                    9a:4c:43:9e:eb:b5:95:a7:3a:6a:9d:21:aa:6e:04:
                    28:73:5f:b5:f5:c5:3e:67:bc:82:64:cb:e7:be:57:
                    a6:86:f8:87:c7:90:55:54:46:fe:ec:ff:e9:25:36:
                    fa:2e:19:3f:6c:a3:bb:e1:10:07:52:31:12:e8:9b:
                    54:97:45:65:d4:2e:d2:93:61:f7:fc:53:fc:f9:dd:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:A0:30:79:39:37:FF:32:B9:DC:93:CC:27:AD:28:34:8D:79:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/fb62fa10-88ab-3c02-af6a-8746a159fcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.136.0/24
                  199.43.0.0/24
                IPv6:
                  2001:500:4::/48
                  2001:500:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:a6:51:d9:6e:b4:c0:08:9d:2a:35:ee:9e:33:fa:a0:4f:
         bf:df:e3:a3:4f:71:7a:54:bc:da:44:ec:83:9c:17:c4:5a:c7:
         94:4e:6f:ea:1c:50:e5:f1:b3:89:54:7e:1e:5e:73:7e:21:02:
         d6:40:50:96:48:5d:a5:9e:85:f9:b2:a5:3d:7a:17:60:b4:11:
         83:c5:a8:0b:3c:a6:70:e6:c6:a9:03:8c:8d:ff:99:ab:04:65:
         15:71:ef:a6:c7:9b:20:aa:f7:bf:58:4d:39:53:77:2a:20:4b:
         d5:8c:54:e4:00:dd:b9:0e:dc:e8:60:c6:f3:0b:4b:97:54:8b:
         04:4f:8f:e7:a7:6d:eb:7d:9c:d0:de:65:56:db:9e:b4:15:ab:
         b1:23:7f:ad:72:e0:a6:bd:8b:5d:15:34:9b:df:55:4c:7b:74:
         06:5f:06:ab:9c:10:47:ca:db:8a:b0:db:e1:78:d9:0d:9d:4c:
         8e:9f:f5:61:54:27:41:4b:0a:db:c0:6a:23:05:51:23:03:d9:
         b1:e0:cd:bf:3b:34:09:5d:42:95:46:84:84:31:ae:8c:71:10:
         f8:84:2a:3a:6b:c5:a2:9e:8e:2e:40:e7:ba:8f:b1:d5:d2:fd:
         1e:2b:77:b8:2e:53:3e:ca:44:49:f9:9f:d2:f7:85:20:c7:59:
         7e:0d:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:24:52 2024 by rpki-client on console-ams.rpki-client.org