Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/4552e577-8102-312f-a916-70d776fa41e0.roa
File:                     4552e577-8102-312f-a916-70d776fa41e0.roa (raw, json)
Hash identifier:          sIgSaQnuHnLdFvsWwBNSqgA9gvAmbtSRWN2hxV7OhA4=
Subject key identifier:   4E:6F:2C:6E:7E:82:66:75:1B:07:07:FE:45:FF:B0:9B:3E:46:04:65
Certificate issuer:       /CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Certificate serial:       010D0C9F432858456C53161D88466789DC615DC0
Authority key identifier: FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/4552e577-8102-312f-a916-70d776fa41e0.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     3807
IP address blocks:        192.231.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:16:1d:88:46:67:89:dc:61:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=3976465e-2d6d-4444-90b0-49bc0c402810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:93:b9:41:38:52:5e:79:bf:4e:4e:d1:e2:
                    f4:88:21:a9:6f:cd:94:35:5c:fa:90:ef:83:43:6b:
                    bd:df:d6:51:18:68:bd:e5:28:46:b7:fd:9b:6c:6e:
                    0b:6b:2d:c2:fd:52:6a:ae:f1:cd:fc:e3:34:8b:eb:
                    d0:46:91:b6:66:f7:01:5f:c4:0c:1e:39:1a:66:5b:
                    ef:0d:64:aa:f8:e0:2e:66:a8:f9:09:54:ac:0a:e6:
                    3f:f5:e1:26:5b:af:82:a4:49:19:cc:4c:1d:29:14:
                    b6:d8:77:64:7f:6f:9f:e1:fa:16:5d:fd:9d:f8:6c:
                    5e:25:ac:eb:8b:d7:af:e5:c0:63:af:ac:ff:4a:cc:
                    b9:be:f7:1d:bf:d9:7e:40:de:43:ca:55:a1:f4:ab:
                    9c:6f:70:06:50:6f:f4:82:f8:aa:2c:8b:80:23:09:
                    5f:f7:70:02:d3:6c:cc:f5:98:c9:ec:e7:be:7f:90:
                    0c:c3:fc:bb:a3:13:9e:b1:71:14:b1:2d:c0:f2:78:
                    eb:18:a0:02:94:9f:d5:c7:84:08:9a:38:e4:cd:87:
                    9d:af:8e:29:3b:74:26:b7:bd:fc:83:2d:41:84:88:
                    af:57:94:18:3c:98:e8:e5:a8:e2:f1:b6:12:9a:ca:
                    76:9a:20:c0:d4:b9:01:05:2e:a9:d8:fc:65:7c:cf:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:2C:6E:7E:82:66:75:1B:07:07:FE:45:FF:B0:9B:3E:46:04:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/4552e577-8102-312f-a916-70d776fa41e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl

            X509v3 Authority Key Identifier:
                keyid:FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:0e:6b:3d:17:74:a2:3d:b5:11:f2:d9:d4:a3:72:f1:36:
         dc:c2:de:32:f0:53:5e:3b:df:ab:49:63:56:43:5e:5e:f5:42:
         ec:47:13:e1:d4:58:60:d2:53:25:20:e3:5e:aa:24:73:7f:7f:
         bc:65:9d:25:fd:fc:01:9d:6b:a1:d4:c4:fd:33:6d:0c:4a:88:
         a0:96:fe:62:00:c3:e3:2e:c6:ae:77:50:56:e0:eb:5c:59:20:
         e8:1b:0a:fa:07:af:a6:fb:66:48:88:d8:f7:d8:59:ee:80:7d:
         1b:7d:42:ae:dc:0c:9d:3c:7c:dc:c0:6d:84:43:d9:2a:31:d2:
         61:cd:c0:74:76:1b:08:69:aa:fb:2c:aa:60:b4:31:d7:20:b4:
         90:9a:50:4c:af:b2:f7:5d:9b:4a:24:82:52:c3:b3:a9:4f:25:
         83:c3:11:26:00:13:4e:0b:7b:f8:50:f1:23:e5:9f:4e:c0:8c:
         c4:85:16:54:90:cd:dc:61:80:3a:9a:1c:37:0f:94:79:9e:d0:
         b4:25:38:33:5b:5c:2c:df:6e:b8:d8:7d:0e:fc:74:27:cc:0b:
         cf:e4:aa:01:12:50:0e:48:07:cb:94:43:73:0d:a2:f3:fe:5d:
         13:c5:cf:80:56:49:29:fe:07:61:ff:59:83:d5:99:7f:66:91:
         26:04:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:49:29 2024 by rpki-client on console-fra.rpki-client.org