Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa
File:                     89cb74d1-7e77-329d-a801-eadfe71b0df2.roa (raw, json)
Hash identifier:          qC9y5rVzbXuSTbjNqPcU7NxlwIGtND5Lat/yRmEGxUs=
Subject key identifier:   1E:C3:73:29:73:AE:4B:18:E3:18:83:1B:55:F4:4B:E0:1C:2F:3E:70
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D2A750C073C768089C15B40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa
Signing time:             Tue 09 Apr 2024 13:47:40 +0000
ROA not before:           Tue 09 Apr 2024 13:47:40 +0000
ROA not after:            Mon 08 Jul 2024 13:47:40 +0000
asID:                     16696
IP address blocks:        141.193.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:2a:75:0c:07:3c:76:80:89:c1:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 13:47:40 2024 GMT
            Not After : Jul  8 13:47:40 2024 GMT
        Subject: CN=196551fe-69e3-4f57-958d-4eb92b5b1783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:72:05:40:54:32:05:67:28:26:f6:d0:51:
                    28:9e:0e:61:f9:ed:72:ae:9a:49:72:91:32:17:1e:
                    0b:c8:0c:b6:56:98:29:bf:21:55:f8:97:ac:a2:11:
                    d4:39:5a:c4:c4:7f:c7:5a:35:64:24:d7:d4:69:a5:
                    1b:06:47:a2:18:92:ec:11:bb:28:e8:13:d1:88:14:
                    1e:eb:15:36:22:9d:fb:2a:14:0b:8a:64:70:0a:79:
                    28:d0:7e:d1:e4:85:57:c5:bb:63:bf:62:82:99:3c:
                    62:a5:9c:0b:98:53:d6:cf:29:41:95:7b:3a:6e:eb:
                    32:78:13:fb:9a:e3:a7:ce:a1:fe:13:54:21:64:48:
                    37:57:74:8b:f2:9c:fe:cd:45:90:80:26:2d:42:6c:
                    7a:f5:fa:a2:30:84:19:35:5c:33:0f:44:c4:e7:74:
                    3a:e3:97:b8:52:43:27:eb:1e:48:0c:92:2e:f2:e9:
                    72:47:e3:21:63:f0:e0:7b:22:01:26:f5:c6:26:4b:
                    ef:d3:6a:f8:91:9e:83:0e:b4:3c:85:89:c8:59:70:
                    99:ac:a4:4b:67:21:c0:c3:88:d1:8e:2d:2b:3d:17:
                    b0:09:2e:89:ac:1f:95:28:24:77:12:fe:21:87:88:
                    86:15:25:30:d0:2d:30:22:91:66:de:36:4b:f5:30:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:73:29:73:AE:4B:18:E3:18:83:1B:55:F4:4B:E0:1C:2F:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/89cb74d1-7e77-329d-a801-eadfe71b0df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:0c:05:55:5f:ed:ef:c6:4b:3c:f3:b7:7a:ea:6c:f7:72:
         4e:fa:9d:93:d4:50:bc:64:50:f3:f3:b8:d6:25:58:f0:6a:c7:
         b1:74:9c:ee:48:61:02:82:24:73:4d:cc:d5:4e:c4:7a:0f:9e:
         a7:ab:2a:6b:9d:36:06:e2:8f:5b:07:27:c9:3e:1b:b5:bd:5a:
         78:4c:54:b7:88:00:bd:c6:c8:a5:77:a7:88:e3:04:cc:62:f3:
         47:bc:d1:ad:08:e2:ba:9c:2f:68:99:1f:86:60:52:63:44:0c:
         27:19:78:e6:cd:86:f2:3d:9b:5b:82:4d:c5:1e:19:b6:fb:7a:
         9b:c2:6c:0e:46:03:de:e2:53:26:c3:62:f7:bc:17:c1:92:1d:
         66:00:ba:c4:ea:43:b4:6a:41:1e:53:8b:dc:f5:6a:de:54:2a:
         30:05:d8:ba:ac:38:f4:cd:09:cf:df:fc:e2:6d:a4:79:24:1a:
         32:d5:7e:97:11:54:ab:b1:84:98:89:f5:5a:c6:c2:67:d7:41:
         e1:b5:2f:fd:c7:60:7a:6e:c6:17:cc:38:8d:ca:cc:22:a2:5a:
         6c:a6:14:a0:db:b4:38:90:aa:06:fa:c0:d1:99:ab:0c:95:db:
         dc:4d:05:25:61:02:91:f8:c7:4f:1e:93:16:f3:8a:ea:bf:d7:
         63:8d:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 17:15:57 2024 by rpki-client on console-ams.rpki-client.org