Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa
File:                     37a66104-e82a-3377-9446-92c2f4d91b5f.roa (raw, json)
Hash identifier:          Rtj0JWtcHnoW1MGx25SS1SOgow5cWLxQHmI3QbhDRqI=
Subject key identifier:   B7:5B:27:52:EE:25:38:19:43:A0:BF:0A:5F:EA:7A:D6:90:5A:F2:F0
Certificate issuer:       /CN=dec54853-8708-4db6-8c16-61e598dd115f
Certificate serial:       010D0C9F4328584569886996AAD10D82E4D5B070
Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     397795
IP address blocks:        199.233.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:69:96:aa:d1:0d:82:e4:d5:b0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=a0cbdd26-dabc-4371-b9c9-f2ef8d10ce28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:1b:ff:50:bd:5b:4d:e7:10:d5:d4:79:3d:
                    eb:98:fa:e4:55:cb:c9:68:df:5a:05:6c:58:84:1e:
                    1a:f3:00:0e:33:81:50:39:26:6b:ee:9a:ee:d4:3a:
                    79:ba:ef:43:a7:45:8a:9b:bc:ec:93:8d:c5:16:da:
                    29:fd:31:40:e5:ec:35:ac:6c:30:e5:c2:2f:26:02:
                    16:44:de:f6:14:2a:44:1f:de:40:a1:5d:0c:97:a2:
                    65:45:39:5f:de:4f:cb:6c:a7:21:bd:f9:ac:f8:75:
                    8b:da:86:cc:d5:ef:f6:97:a8:33:5f:a7:a9:9d:ec:
                    0e:60:0a:c1:50:69:d1:16:87:57:23:95:83:c7:32:
                    55:28:9e:44:d1:7b:2e:70:01:db:41:0e:ed:d3:49:
                    09:b0:e8:8c:c3:bb:9f:1b:06:f4:12:20:8d:d6:1c:
                    f4:14:e7:c1:af:ed:cb:e6:d8:ac:0d:51:f5:d1:c0:
                    0a:0f:cd:a0:4d:d8:7d:fe:7b:2a:87:fe:61:22:9e:
                    95:24:fb:15:01:66:a3:96:85:40:63:2b:03:f6:84:
                    17:1a:09:86:e8:65:ad:60:84:41:bb:28:7d:df:ee:
                    cd:96:28:fb:86:04:ef:68:a0:ce:e6:6f:60:e1:50:
                    1a:ae:12:88:27:10:76:bf:dc:a4:dc:5f:c0:9b:2f:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:27:52:EE:25:38:19:43:A0:BF:0A:5F:EA:7A:D6:90:5A:F2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl

            X509v3 Authority Key Identifier:
                keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:c1:20:ab:ee:87:1d:40:74:1d:41:0e:7d:e4:bd:23:7e:
         29:92:ac:e7:17:af:d0:50:ac:40:ee:43:49:55:d8:c0:11:49:
         7c:e1:50:87:54:66:b0:d8:ab:a0:1f:da:68:df:e8:d9:ba:e5:
         32:c3:2b:ab:46:c4:d4:fe:78:0d:06:a0:4e:03:b9:71:4a:b1:
         48:7f:c8:b5:04:fe:62:be:57:95:3e:a4:69:87:b0:a0:69:63:
         ce:d0:8b:03:20:47:de:33:2d:dc:f1:84:51:7c:b2:58:f5:df:
         9d:e2:8a:96:f0:a2:0d:b5:91:06:d4:14:bf:83:5e:3c:36:ed:
         2e:1e:03:be:0e:24:e3:75:96:d7:76:8a:35:ed:7c:fb:ae:c7:
         70:b2:e7:8d:22:64:88:81:09:a0:22:75:c8:55:74:54:02:97:
         82:17:66:f3:7d:f0:99:87:a3:fe:d7:91:13:7a:7b:39:51:00:
         e3:82:69:32:af:47:41:7f:8f:84:56:fe:90:2c:dd:2c:83:f4:
         49:f2:aa:b0:a0:6a:0c:8d:16:c6:86:99:21:41:74:06:5c:5f:
         88:67:0d:59:b9:08:99:33:89:ad:b4:13:ea:a5:92:56:6a:f7:
         21:cc:00:59:86:ac:ae:78:3f:27:e9:10:70:20:38:c5:3b:9a:
         d5:da:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 04:38:56 2024 by rpki-client on console-fra.rpki-client.org