Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
File:                     8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json)
Hash identifier:          l+WEtRTt5qpo5vnvx9o/TEAuuzbCoPzg9bGlq9jfJKE=
Subject key identifier:   58:FC:3A:8D:EA:51:C6:5B:2C:DE:AC:01:6F:CD:B1:81:A8:43:3A:0E
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F432858459A6343E23F8ED4259D260900
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     30158
IP address blocks:        199.189.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:43:e2:3f:8e:d4:25:9d:26:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=facb2920-5879-4b56-9f9d-734aefa76f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:12:ca:f0:a7:97:38:ce:aa:0c:d3:6c:f6:
                    33:50:9c:d3:80:cb:6f:09:6e:b1:f0:5b:5b:96:9f:
                    56:d5:c7:50:08:df:7f:a8:43:9e:a2:e1:f2:83:a4:
                    af:20:65:79:ac:fc:0c:37:6d:08:2c:8e:e3:a2:8c:
                    a8:cd:10:b5:cf:b5:33:ad:18:5f:3c:40:e4:b1:ce:
                    a0:d7:54:26:19:5e:e2:aa:0f:dd:3a:7c:39:73:de:
                    00:1f:ba:a5:d8:2a:0d:9d:d2:49:80:80:6a:5a:e5:
                    5c:57:99:51:0e:89:10:46:a3:6a:1d:ed:60:a8:37:
                    71:b9:0b:44:a6:a0:d0:f9:62:83:be:e1:a0:5f:2a:
                    8c:bb:fb:06:a9:2f:84:91:12:92:82:a9:ae:d6:58:
                    56:e4:c3:60:2f:9f:3d:62:6d:c0:54:16:c2:eb:d5:
                    db:a0:1c:78:fc:66:23:36:f6:eb:51:c4:2e:2c:0d:
                    6a:a2:a0:cb:e1:ea:24:b9:35:e1:93:bc:af:c3:b4:
                    ce:cd:32:47:0e:ba:82:1d:49:7c:e7:ad:7f:4c:76:
                    9f:2e:98:a6:ee:ea:00:51:31:b4:6e:15:a6:b8:7a:
                    d2:d0:1b:5e:b0:ed:92:f3:68:6d:f2:39:5d:b5:7f:
                    cd:1b:ff:28:e9:0f:0c:05:2a:cd:e7:a6:db:7f:eb:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FC:3A:8D:EA:51:C6:5B:2C:DE:AC:01:6F:CD:B1:81:A8:43:3A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:59:75:25:b2:d9:84:39:95:da:31:42:f2:ff:ab:75:85:03:
         13:db:9b:67:dd:91:9b:b2:8d:50:1a:af:30:e2:af:d2:b1:3b:
         f4:f1:ad:01:12:5a:86:35:12:a1:10:9c:3a:d0:27:19:57:83:
         0d:8a:66:45:23:98:68:8c:96:ed:53:a3:bc:fa:2c:c1:82:7b:
         9a:b9:c4:64:0d:94:b9:3d:39:59:16:6b:87:4e:26:06:d1:7a:
         6d:6a:58:1d:20:0b:6b:b8:8c:53:a5:fd:55:4c:eb:ea:fc:9f:
         a8:b2:c1:d6:6f:0e:f0:fc:b1:dd:62:6f:17:5a:7b:9e:cb:fe:
         03:3d:f0:d9:7c:63:77:fe:aa:b6:aa:c9:d4:fe:ec:f4:d4:4f:
         2f:dc:52:f2:8d:9f:3f:c1:1b:64:75:71:39:50:53:e8:3f:49:
         d5:43:1a:e3:fc:2d:b1:04:63:13:49:04:ba:f6:dd:dd:d5:83:
         1c:48:32:c6:11:9c:04:99:49:b8:1e:0c:c7:77:25:dd:2d:02:
         1a:29:cf:00:17:66:bc:35:18:04:e5:1f:fd:73:bd:2e:94:c9:
         08:42:f3:80:2d:23:88:09:2a:5d:a3:cd:cf:46:81:05:37:f8:
         ba:7c:18:e6:e7:5c:43:59:63:5b:32:83:62:ad:c2:20:fb:5f:
         7a:81:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org