Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
File:                     200ead2f-5307-3cd8-add7-21bfdad71d70.roa (raw, json)
Hash identifier:          OISGi+8Xco5F8GCFmQ7Cxh5uV94OeXEk1FNbqu45tBE=
Subject key identifier:   C3:9F:6D:DA:73:43:B1:0A:60:89:55:91:A3:12:4E:01:7D:4D:53:9A
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858458DD34D0EF52CA42C22A82A80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     5511
IP address blocks:        200.30.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4d:0e:f5:2c:a4:2c:22:a8:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=efad55fb-3230-4eb0-9482-846d6bc93217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:b7:c6:c8:1e:3a:91:42:c9:f4:53:75:5e:
                    ff:60:4d:8c:11:7c:b8:e7:c1:6c:74:b5:2e:c8:82:
                    a6:7b:16:39:07:dc:8c:e9:45:b6:57:9f:bd:5f:74:
                    23:ec:ff:46:25:66:08:58:eb:b9:a4:0e:62:d1:39:
                    66:f1:f9:78:3b:d8:86:b0:28:49:dc:82:be:60:f2:
                    97:2a:36:41:f6:42:8e:ff:e2:36:a0:52:31:a3:66:
                    74:40:4f:11:02:5c:e1:0d:ac:2f:63:71:d6:3d:09:
                    20:b5:f9:d2:11:29:ba:fa:a3:de:a6:ca:96:ee:55:
                    ca:4d:f3:36:f1:9c:dc:9f:06:c2:3c:0b:0d:40:9b:
                    6d:c4:c0:a6:9f:e0:84:4b:3f:0a:67:80:d1:bf:cc:
                    ed:8d:89:42:7d:86:7d:f1:5b:bb:cf:7f:6f:7b:81:
                    36:c1:02:2c:67:cc:50:ee:57:0d:35:99:44:04:8b:
                    19:c3:9b:65:32:55:d8:fe:c8:6f:0d:b6:19:05:5b:
                    0b:0c:13:f5:19:e5:68:b6:f0:06:64:1c:e8:66:d4:
                    91:cd:0f:bb:51:99:da:2c:5d:47:6d:c7:03:19:46:
                    cd:07:0b:8a:19:19:33:1a:9a:a2:38:b2:67:2e:73:
                    09:2f:82:6b:47:80:c1:86:bd:e9:2f:3b:20:b6:41:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:6D:DA:73:43:B1:0A:60:89:55:91:A3:12:4E:01:7D:4D:53:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:0a:70:fb:f5:35:4e:2c:8d:30:55:ab:9d:6a:25:2c:47:11:
         e9:af:9f:29:6f:4e:8b:f2:78:f4:fa:bd:da:12:22:bf:fc:88:
         c8:0c:64:5d:5e:76:db:7d:48:77:17:ec:3e:5e:e5:d2:85:20:
         d1:31:b0:d8:d6:fc:ee:db:9c:a5:28:79:18:4a:7a:20:47:5e:
         76:92:d4:25:0d:08:87:a2:ae:8c:ef:c2:28:b9:af:74:a8:02:
         b7:1f:fa:93:d0:98:a2:0a:e8:73:b8:ab:80:20:09:b7:a6:7d:
         e7:75:26:be:7a:57:5e:14:fb:f2:7b:73:bc:6a:3f:50:93:af:
         b8:69:d3:bc:1c:8e:a7:f1:19:10:62:ee:40:6f:87:43:86:cf:
         66:58:0d:23:bf:a1:a2:23:6a:30:79:13:9f:92:b5:3f:e0:6a:
         6f:d3:3e:0a:b2:65:02:5c:f7:f5:9d:8d:ee:e8:07:76:44:cb:
         24:bb:5d:89:a3:8a:44:94:1d:12:5b:f5:c1:34:5a:82:f1:22:
         4c:98:ab:bb:94:a1:db:68:09:be:c1:41:3b:89:8e:43:23:68:
         e0:56:47:d0:18:5a:77:92:55:e8:aa:81:a1:fc:da:4a:af:37:
         c0:bc:38:62:e3:0f:67:88:eb:ab:90:9b:f3:e6:76:9b:e5:95:
         24:54:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 12:46:07 2024 by rpki-client on console-fra.rpki-client.org