Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
File:                     577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa (raw, json)
Hash identifier:          HjPDR4HLnvB1UUyKRyk3tQXBtZod37T0FuByJmTDR+M=
Subject key identifier:   60:98:23:EB:40:CB:3A:24:DF:68:95:32:38:71:6C:49:EB:B1:CB:26
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459E935BD6028551DFB3209144
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     22006
IP address blocks:        165.254.238.0/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5b:d6:02:85:51:df:b3:20:91:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=991fe0a2-718e-4323-8fa0-2b41dc137b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:1c:f5:c8:35:34:e3:65:35:c1:53:70:35:
                    36:9b:ff:46:0e:ed:3b:94:9e:e6:06:d9:44:b0:a2:
                    4e:68:6f:b4:25:1d:6d:8f:39:49:82:37:47:f9:d3:
                    f0:f6:23:1e:c8:86:12:c4:0a:48:7d:ce:e5:9a:74:
                    21:33:d2:56:0c:7f:15:c2:64:90:2c:3d:3b:96:4d:
                    57:0f:8a:20:ee:3c:9c:36:fe:e2:2e:a3:54:c7:2e:
                    5e:48:69:e1:a4:98:b1:e0:b0:1f:96:f9:01:a1:c8:
                    3f:eb:35:a9:cf:80:de:93:89:ac:ec:56:ff:b1:90:
                    49:f6:56:b1:84:4c:80:e3:28:db:8b:ff:70:0a:b6:
                    02:45:90:cd:84:46:90:28:2f:86:99:12:d7:6e:ea:
                    6e:1f:04:87:ec:fe:8a:20:1d:fa:43:94:3d:fd:15:
                    91:2c:99:fb:20:77:b0:e4:0e:13:e8:83:52:f2:13:
                    36:35:d1:da:54:d6:b1:ec:e9:42:0e:c8:04:cc:99:
                    93:44:21:4f:ec:86:b8:f3:10:fc:3b:04:07:07:d0:
                    c0:96:9e:da:01:80:eb:b8:f4:61:cd:54:b7:23:f2:
                    87:48:54:b6:25:c7:fa:c8:e9:ba:26:32:2a:44:e0:
                    88:4d:1b:14:16:59:71:4c:ad:38:be:b5:bb:fc:90:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:23:EB:40:CB:3A:24:DF:68:95:32:38:71:6C:49:EB:B1:CB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.238.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:93:a5:b9:4b:b0:cf:1b:33:db:f6:3f:0c:ad:db:a5:fa:01:
         59:a9:bd:5f:fa:6b:67:00:3f:20:59:d2:b3:4d:4a:db:b1:7c:
         d7:42:cf:89:42:15:70:f4:d5:e9:5b:47:dc:2a:b1:d8:2b:cd:
         b5:8f:c5:7c:d8:fd:2a:b8:e8:a5:fe:4e:7a:b4:b1:28:12:a8:
         85:98:45:84:48:92:30:40:bd:a9:d8:53:fa:30:59:98:5c:c7:
         f2:9d:4b:1e:36:9e:95:b1:3a:74:d9:3d:60:dd:f8:d3:67:6a:
         7d:85:b0:42:bb:a4:6c:30:9c:78:50:7b:f4:61:af:73:d3:35:
         5a:a0:a0:cd:af:df:e6:e2:7a:5f:e6:7f:08:3b:0a:b9:78:c8:
         3d:a0:f2:48:8e:c0:ab:27:11:47:f4:0f:e3:a8:b8:0f:28:fd:
         70:a5:41:12:e9:c4:00:09:2f:78:ee:2f:f2:80:94:93:6a:97:
         6e:40:8c:60:dd:72:a7:39:e3:49:dd:a6:40:23:4b:52:83:05:
         cd:41:63:7a:df:fd:0b:50:19:59:46:5b:68:4a:00:bd:9d:00:
         26:98:8e:64:da:5e:fd:16:78:25:2b:a3:5b:63:14:f2:fb:16:
         4c:e1:c0:85:ca:55:41:77:5c:95:e2:1e:6d:e6:d0:6e:d2:6c:
         3b:38:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:48:36 2024 by rpki-client on console-fra.rpki-client.org