Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa
File:                     5a46ffe2-8ecc-3175-83c2-5e0470407575.roa (raw, json)
Hash identifier:          NgSe3ksco/BX8oRF+MyLf9VDOCVRHdA5mOS09/QmhUA=
Subject key identifier:   7F:6F:4A:76:C6:71:EF:33:0F:BE:AE:03:AD:92:DB:D2:04:5C:27:16
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858453FA8083E9FDD7607604E1800
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     36231
IP address blocks:        163.123.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:08:3e:9f:dd:76:07:60:4e:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=214286bd-edda-4fbf-b045-3fc279f5e3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:1d:d3:f0:d6:86:ce:f5:90:e5:81:2a:4d:
                    a3:4a:7d:76:68:e2:61:d9:67:dd:73:e1:e4:b9:0f:
                    51:72:33:89:a4:ff:8c:7e:c7:59:f2:00:7c:f1:39:
                    ce:de:08:02:7a:44:86:a3:d1:79:ec:ef:69:75:41:
                    72:52:6b:52:5c:b7:40:0d:20:cb:45:8e:a4:70:b1:
                    57:67:09:c6:48:d3:14:09:4d:9e:0c:4c:00:bf:d9:
                    22:59:e5:ab:0d:f7:c9:05:bf:3d:58:96:2d:ee:2d:
                    88:bd:ba:c5:70:1e:4f:87:a0:9a:93:51:42:52:37:
                    9c:2c:03:a4:9a:3a:7f:01:5d:08:e5:63:f9:86:e7:
                    05:98:64:b1:0c:f8:02:85:a5:e0:ea:83:4a:be:d8:
                    98:ac:76:f3:8c:cf:51:90:2a:d0:48:48:11:33:cb:
                    66:12:e6:6c:dd:56:2e:57:06:95:9e:27:32:88:ed:
                    07:19:43:fa:2f:f0:41:30:0d:44:13:4c:93:00:f6:
                    25:a8:d9:59:1b:88:ad:33:61:b8:2b:26:e6:b1:a4:
                    84:99:bf:ba:c8:a1:76:a9:0b:8a:14:9a:5f:e9:74:
                    4b:61:d2:2c:63:7a:c5:c4:d9:54:c8:cd:ee:0d:fd:
                    d9:19:00:3d:0b:bb:21:99:0e:41:2d:ce:de:77:c1:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:4A:76:C6:71:EF:33:0F:BE:AE:03:AD:92:DB:D2:04:5C:27:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a46ffe2-8ecc-3175-83c2-5e0470407575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:30:d1:76:01:1a:db:31:32:07:de:89:08:43:77:c4:48:4a:
         45:01:b3:70:ba:cf:e0:72:5b:bb:48:66:87:99:80:ed:21:c0:
         85:f7:87:e5:5d:99:99:69:03:5d:87:a6:dd:d7:92:60:d5:14:
         4f:98:ed:74:8b:9c:1e:76:77:cf:1d:b4:89:9e:34:de:94:00:
         c5:fb:3c:f0:ac:18:da:c2:cc:99:11:cf:b7:81:32:6c:d1:40:
         21:1b:df:bc:73:3b:2f:b8:7b:fd:19:c1:99:7f:fa:81:25:f7:
         f5:6e:4f:08:c2:b2:f7:2c:13:bb:b2:00:bf:fd:8f:b0:29:10:
         dd:f1:41:96:33:c5:c3:57:f0:c5:6d:8b:45:36:6e:e4:dc:f4:
         74:83:31:cf:05:92:33:c7:be:3d:fd:02:cb:c6:be:66:e2:19:
         21:7d:b9:4d:8f:61:9f:1f:05:a3:7d:f9:53:28:62:a4:a5:88:
         38:47:28:b2:2a:da:10:d3:05:d4:7e:75:ee:63:c0:1d:cd:5b:
         97:a5:70:bd:34:82:c2:77:12:82:aa:a4:ec:ee:24:f0:84:7e:
         19:4a:3e:25:65:92:ea:b2:22:1c:86:a2:a2:d6:87:d6:4a:87:
         19:09:fa:e1:b1:0a:72:2f:3d:66:2e:fa:e8:a8:1d:c7:8b:cb:
         c3:e3:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:10:01 2024 by rpki-client on console-fra.rpki-client.org