Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01df3172-4c3d-3ddf-a7b5-e45feaeaeda2.roa
File:                     01df3172-4c3d-3ddf-a7b5-e45feaeaeda2.roa (raw, json)
Hash identifier:          d0CaeuUbCeg3SuHo9ILCDRhZlcGgMEo7IA+54xL7xP0=
Subject key identifier:   C5:8B:86:B8:7C:A9:47:21:99:DD:45:7C:CE:02:D6:59:64:B4:86:6B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F5CF66D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01df3172-4c3d-3ddf-a7b5-e45feaeaeda2.roa
Signing time:             Sun 29 Sep 2019 23:31:01 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     203849
IP address blocks:        165.254.191.0/26 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:5c:f6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=3c1e185e-056b-4cdf-b2b9-1a5087d7cef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:d4:82:d8:b0:f1:3a:96:d1:92:62:ac:44:
                    fd:56:f3:40:2d:39:d2:ed:90:ea:59:be:d7:25:cc:
                    1a:06:5b:25:78:10:6d:69:8d:26:7d:76:dc:13:9f:
                    54:38:48:9f:d4:70:f7:2f:de:d5:24:a1:aa:f7:f0:
                    6c:e0:42:e2:a2:d5:72:72:0e:5b:38:a0:95:3e:f2:
                    52:13:2e:db:1f:bc:99:42:65:ba:91:4a:e9:7a:50:
                    22:7d:98:39:f2:aa:a9:d5:f9:9d:47:e2:9d:3a:65:
                    25:f9:32:21:72:d9:9e:05:68:34:59:8b:a3:c6:68:
                    3c:fa:17:aa:f7:9c:8f:51:e1:e0:5a:6a:f0:08:22:
                    ce:a4:43:d6:ff:f8:bb:c6:09:fe:e3:47:63:9c:3e:
                    c8:bc:56:5b:8e:cb:51:a6:ac:57:fe:e0:c8:af:02:
                    03:68:5f:3b:bd:e4:ca:5f:b8:9a:9e:1a:fb:1d:f6:
                    37:f3:8e:96:dd:0f:92:1b:a8:37:eb:5e:92:96:7d:
                    26:3b:f7:f7:15:9a:71:1d:6d:ab:5f:b9:10:fd:02:
                    a8:72:54:9f:b0:1b:18:29:ff:58:2b:bc:1e:df:05:
                    3d:94:2c:9c:f1:84:cb:ac:7f:92:60:8a:60:db:2a:
                    76:6e:6f:db:7c:d4:1d:2a:0a:f0:79:be:bb:f2:81:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:86:B8:7C:A9:47:21:99:DD:45:7C:CE:02:D6:59:64:B4:86:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01df3172-4c3d-3ddf-a7b5-e45feaeaeda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.191.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:59:c6:5d:df:0b:7e:f2:0c:d5:26:5e:d9:a4:4c:6e:f7:c3:
         87:4c:0b:2c:50:86:4c:34:88:dd:30:51:a9:d3:9b:c6:4c:40:
         63:16:58:3d:62:c7:a0:33:b2:b4:2d:b5:aa:b3:c6:9d:68:3c:
         3c:4f:b3:32:9e:48:69:4f:9c:71:e2:02:5a:65:14:4f:51:50:
         62:b2:f9:05:e1:ec:5a:22:52:e5:c9:8c:b7:a6:77:5b:40:54:
         22:67:dc:55:f1:f7:70:76:09:92:22:80:b9:7b:5c:01:6b:f4:
         d5:eb:7b:a3:dd:3a:b2:ad:d3:3c:f8:d7:a0:98:dd:b1:49:50:
         fd:8b:ec:7c:85:5f:9b:88:0c:cf:e1:3f:4d:af:9a:3a:e7:14:
         01:ad:9a:75:3d:f0:80:9c:26:9e:21:ce:32:a4:65:2f:ae:c5:
         47:6d:c5:aa:79:f1:a2:7c:76:0d:42:65:75:eb:a8:f0:aa:4f:
         2a:78:9a:cb:36:76:ec:d5:1f:43:97:58:09:16:d0:d7:15:cf:
         63:42:76:8d:0f:da:5e:fe:9e:7c:35:5a:9d:7a:9c:69:94:9f:
         ef:b9:db:9d:45:ab:f0:19:fb:0a:4e:53:3f:c3:2e:cc:7c:57:
         bd:fd:73:09:5a:c4:c2:a2:5c:48:9b:7e:c3:15:2f:b4:32:66:
         45:ca:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:02:38 2024 by rpki-client on console-fra.rpki-client.org