Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa
File:                     c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json)
Hash identifier:          P+aGlyZUHJSXnDdRzB+SK19KgUrRZHtsZsAhEbbBnOM=
Subject key identifier:   79:29:0F:46:82:B1:ED:33:80:F2:4D:89:E9:87:14:58:01:6A:01:22
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE00F3EA69DC83047F6C70
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        198.64.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:00:f3:ea:69:dc:83:04:7f:6c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=db249edf-4b5e-4853-a243-f457a78471ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:1e:1f:88:1a:e0:61:d3:2c:27:b0:72:fa:
                    de:7a:c4:e1:3b:02:5b:46:99:48:cb:65:03:98:d1:
                    31:86:5e:ba:c7:6a:db:71:97:8a:d0:1e:75:1a:72:
                    d5:71:6c:1f:e6:41:04:b6:32:63:88:91:5a:bd:e5:
                    bd:a2:d7:3d:ea:ac:23:94:7c:dd:1c:5a:47:6e:54:
                    e1:86:27:7c:41:9c:66:3a:ad:83:7b:d4:9d:18:9b:
                    01:7b:0c:f6:13:0b:85:03:c5:3d:89:8d:94:19:d7:
                    36:07:1e:52:41:25:e0:26:bd:fd:08:8f:1f:03:b0:
                    60:69:f1:15:8a:c2:bf:b3:88:f7:7b:ed:67:02:77:
                    00:97:eb:16:15:68:92:09:ef:c2:32:d5:91:b5:d2:
                    ad:75:73:af:d4:d9:78:e3:87:90:bb:d5:00:c7:6d:
                    e0:95:82:cd:e9:4d:a7:31:56:de:53:67:40:e3:5e:
                    56:30:63:9e:c8:53:82:5f:01:9e:1e:8b:77:13:27:
                    08:2d:cf:e3:c9:eb:e3:f6:2f:7d:5a:b4:8c:d1:f2:
                    f9:da:68:9b:f0:a7:13:5e:bb:24:cb:17:49:a9:a7:
                    30:89:e4:55:84:e5:7e:8e:18:5d:9a:39:28:f0:e2:
                    f2:ce:72:8c:a1:ba:af:ce:32:7d:f8:d9:5d:65:c5:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:29:0F:46:82:B1:ED:33:80:F2:4D:89:E9:87:14:58:01:6A:01:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.64.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:fc:b4:c7:74:52:71:c8:1d:40:b7:b8:71:66:63:58:5f:
         1e:06:38:71:14:b0:f5:5d:c9:ac:1d:57:13:3d:dc:02:29:7d:
         29:37:a0:1d:98:64:2a:b2:9b:5e:8f:d9:5f:fb:aa:67:d1:dd:
         71:ff:38:47:d8:01:0c:a4:e9:9f:36:d9:f5:69:8b:0c:af:b4:
         64:31:b8:ae:88:96:2d:ed:f9:7d:d2:ff:06:5e:ba:fb:4e:64:
         ce:24:4a:20:5f:ad:f5:35:2c:50:02:b6:98:6c:f9:e1:3d:90:
         31:09:9e:98:13:ba:97:a5:d6:1a:af:dd:6f:58:95:ce:20:60:
         5e:a9:54:6b:84:b3:24:01:94:5a:fb:b7:47:70:b9:98:35:f1:
         b2:7e:b8:e7:36:49:f0:37:23:98:c6:3e:d1:4f:7d:59:d3:eb:
         d5:7d:dd:7e:01:b5:ed:81:21:4f:bf:ba:cf:ad:87:1b:ca:ad:
         ce:e5:9a:32:89:53:3d:9f:4a:cc:33:5d:09:f7:52:de:2b:68:
         60:3d:5c:57:0a:bb:7e:6f:ee:69:f6:ac:a3:2f:9c:2e:c6:c3:
         e2:7e:e7:3b:d0:77:7b:2e:71:76:03:c9:e6:85:eb:aa:d1:8b:
         f5:1e:07:e2:21:ff:bc:db:59:06:3a:37:50:9a:0d:f3:7b:74:
         79:c9:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:44:16 2024 by rpki-client on console-ams.rpki-client.org