Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa
File:                     1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa (raw, json)
Hash identifier:          RB1c/1wXR39AcUTTYfnFZKDXkpzLViVrFHUrPUu0JDo=
Subject key identifier:   2B:AF:4B:EB:ED:F1:69:19:1D:DE:E5:74:3F:71:27:ED:B2:6B:A3:00
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F43285845909DE6C286A2915A07266E60
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     29909
IP address blocks:        162.252.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e6:c2:86:a2:91:5a:07:26:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=260eb9ed-e35b-40ac-ac09-2f7fc14431a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:69:62:a9:be:90:51:61:e2:8b:56:8b:4d:
                    c9:41:ee:c5:1e:6e:f3:6e:f7:16:46:51:79:3e:a5:
                    0b:df:af:17:94:68:a2:ab:b9:98:cc:49:cb:cb:53:
                    66:84:39:98:b9:9d:ac:76:06:7f:89:90:b9:b5:2e:
                    1d:df:d9:6e:51:0b:85:66:02:f4:60:eb:c3:76:ff:
                    a1:0e:ae:f0:29:f7:b6:eb:43:0c:7c:02:2e:05:13:
                    37:e1:4b:07:eb:84:9a:9b:0f:d2:0e:87:c3:2d:ee:
                    ab:d7:20:7b:52:c5:03:8f:10:c5:f6:42:fa:9d:df:
                    08:06:aa:5b:90:a8:15:d3:bc:da:ff:cc:09:5b:ce:
                    ac:c2:20:00:d9:aa:27:81:63:7e:04:75:7d:69:b6:
                    0e:b4:df:f6:27:ab:a8:62:83:3f:98:98:58:62:9d:
                    5c:aa:b4:c3:0d:02:90:c3:8b:b9:a2:ab:97:5e:fc:
                    7a:01:8f:01:93:ab:66:b7:6c:3b:78:ab:8b:0a:3a:
                    1a:14:c6:6e:1e:67:a3:02:3f:38:06:6b:94:76:2c:
                    93:54:1b:42:a7:83:09:ef:35:5d:f8:4c:60:1f:14:
                    9f:08:0b:35:f3:91:1c:94:c5:f8:53:8c:0f:06:14:
                    b6:5a:c8:86:c3:1b:73:a6:29:0f:56:23:68:8d:c0:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AF:4B:EB:ED:F1:69:19:1D:DE:E5:74:3F:71:27:ED:B2:6B:A3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:80:cb:ed:d2:67:41:0a:2b:07:4b:a0:90:0d:2e:67:a2:51:
         1d:92:c7:74:db:ad:a6:66:cc:dd:5b:c4:48:da:1d:41:a0:f9:
         66:59:17:42:07:e7:7d:31:ac:07:3e:d2:7a:c1:9a:5b:e0:2d:
         71:7b:84:5a:a5:8f:6f:02:2d:19:da:d2:45:8a:34:71:58:50:
         f1:dd:81:ed:c6:bb:7b:bd:77:f5:2a:ff:4e:a5:4f:db:c2:90:
         c2:cb:b8:26:ba:86:13:7f:c8:13:be:d8:4a:56:51:3b:70:0f:
         83:d1:76:72:b9:fd:e2:c0:98:60:21:2e:e8:7c:0d:58:a7:9b:
         1e:9c:5f:49:1f:75:9a:53:ce:f1:62:5f:f2:f6:e5:94:38:50:
         9d:a4:35:f6:2d:1f:a5:bd:7c:34:5e:e6:e6:5a:53:56:77:71:
         39:af:63:26:b5:15:ff:d4:6a:3f:bb:af:e1:fb:87:61:a3:b7:
         9d:75:61:e4:7e:a1:b9:bd:eb:f1:c3:ee:78:8e:73:d7:aa:93:
         38:1f:13:ce:e2:59:d0:f0:94:c2:ed:8b:8a:6e:5c:6b:a6:75:
         cb:34:12:9f:a3:9c:2a:58:0f:2e:d7:5f:39:e7:ad:b4:3b:6f:
         dd:38:fb:7f:41:97:22:f8:4a:01:19:2b:31:27:5e:2c:d3:21:
         13:56:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:45:43 2024 by rpki-client on console-fra.rpki-client.org