Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/994c9d55-c562-3818-ac9e-8b5d0af41e42.roa
File:                     994c9d55-c562-3818-ac9e-8b5d0af41e42.roa (raw, json)
Hash identifier:          MwDDai641G8WGKLzSwxKz208Wpsp+V+dXB0cf+TxbuM=
Subject key identifier:   2F:18:84:D0:80:FA:0B:6A:B7:C2:75:49:8B:75:A1:25:85:4B:4B:89
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584505257748E7F3295F22F20C40
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/994c9d55-c562-3818-ac9e-8b5d0af41e42.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        162.33.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:77:48:e7:f3:29:5f:22:f2:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=cf3835b1-080b-474d-a5b3-d5b378a2e134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:2a:aa:53:88:44:c3:29:7f:88:a6:af:3f:
                    75:c6:9f:d0:8d:50:9c:e2:fb:f8:5f:27:9f:d9:3a:
                    1b:19:31:21:a3:ba:73:10:8a:39:3e:17:6f:11:04:
                    b8:0f:ac:cd:6c:3c:5c:b5:36:41:5f:70:98:11:58:
                    5b:2e:3d:93:9e:5b:41:d1:f9:06:42:4c:24:6f:bf:
                    a1:71:0b:9e:8a:10:e6:a8:36:4b:14:e1:0a:1f:73:
                    e0:85:ac:84:2a:ae:51:cb:93:be:02:65:9d:df:53:
                    60:34:01:39:fa:e2:ea:5d:4b:06:99:96:c3:7a:13:
                    c9:60:74:1b:36:c1:ec:b6:c5:03:43:da:f7:94:b6:
                    08:d8:e2:bd:52:1c:17:bd:ec:77:0d:3b:a5:6e:f5:
                    db:bb:31:c1:f1:4e:30:9c:87:83:54:c9:db:0a:cb:
                    49:9c:6b:c0:ce:60:e5:8f:75:83:2f:25:40:ac:cc:
                    1a:16:69:65:ea:5f:36:da:b3:c7:ea:9b:4d:c4:9b:
                    20:85:4f:3f:f7:ea:41:45:a2:aa:74:a9:94:17:ec:
                    69:f6:67:d6:65:7d:32:3f:db:57:fa:50:a2:4d:8d:
                    6f:89:e2:fa:41:f2:29:6e:44:b8:d3:aa:e5:95:2b:
                    62:3f:ca:0c:a6:15:75:97:17:38:23:31:10:c1:15:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:84:D0:80:FA:0B:6A:B7:C2:75:49:8B:75:A1:25:85:4B:4B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/994c9d55-c562-3818-ac9e-8b5d0af41e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:1d:34:8c:9f:87:45:8d:b5:24:46:8c:39:08:4a:15:a4:
         e3:d3:ac:da:c2:18:5b:74:d6:63:ec:e8:56:c7:9b:b7:67:9f:
         c3:ee:02:81:16:6a:8e:b3:12:a6:33:30:49:a7:35:a0:38:51:
         67:a9:b3:1d:bb:2d:d3:2a:2f:ab:3f:5a:66:a7:db:f2:38:2a:
         8c:d3:21:24:df:60:64:47:57:4e:b7:b8:97:a4:c5:e6:66:13:
         8b:4a:9a:86:6e:df:73:2e:76:f9:66:18:5d:1b:ce:da:78:7c:
         57:44:c6:11:7f:6e:b9:2a:bc:38:d2:79:21:1d:85:02:81:0f:
         fb:02:66:b8:10:10:18:4a:f5:aa:9b:0f:27:9e:6e:15:f1:04:
         7b:95:49:d5:48:6b:ec:33:e7:84:7c:a4:07:90:81:95:01:35:
         32:1f:5e:62:81:0d:50:b1:84:73:b1:44:d8:2f:95:3a:77:7c:
         11:3d:3c:49:1b:bf:bc:41:c0:52:e9:11:75:d1:1b:78:94:ab:
         32:b5:e6:6e:20:ce:ca:20:69:5f:c0:77:39:92:f8:64:83:58:
         49:1f:c6:eb:6a:b2:44:57:63:7e:17:52:de:3c:53:88:1f:d2:
         57:9f:c7:c5:ad:ef:0d:1d:5f:b7:3b:29:56:23:5d:e6:fd:f2:
         8c:9a:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:15 2024 by rpki-client on console-fra.rpki-client.org