Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa
File:                     fa861745-00da-3d9c-9262-192bcb50cab0.roa (raw, json)
Hash identifier:          rzmUARDN4s/e7Wl4w7IUlRpcnF6xLYmLTVQBElitxZ0=
Subject key identifier:   E2:ED:AF:1F:91:A8:B1:12:C3:92:E5:9A:03:7E:65:C1:AC:A6:CD:28
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584534D869BA3730A95E86BFB380
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa
Signing time:             Thu 14 Mar 2024 16:04:09 +0000
ROA not before:           Thu 14 Mar 2024 16:04:09 +0000
ROA not after:            Wed 12 Jun 2024 16:04:09 +0000
asID:                     4213
IP address blocks:        209.151.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:d8:69:ba:37:30:a9:5e:86:bf:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar 14 16:04:09 2024 GMT
            Not After : Jun 12 16:04:09 2024 GMT
        Subject: CN=3c832151-678d-4955-9467-e821fd67d2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:9d:7d:1e:74:dd:c5:26:d8:05:47:1f:e5:
                    65:a6:66:b6:b9:a8:89:dc:0a:00:0d:33:78:b8:29:
                    f6:70:62:d6:63:61:91:d9:8a:5b:fb:2a:1a:d8:e5:
                    bc:7e:f1:26:73:6f:20:7d:d2:de:3b:a0:e1:93:c0:
                    26:f8:1a:91:60:3e:06:6f:bb:c8:21:d0:b9:e4:51:
                    bd:40:64:ff:44:a9:c8:2f:09:76:6f:50:1f:83:bf:
                    6f:5d:48:25:3e:67:72:7e:1f:19:69:8a:d9:a2:04:
                    12:d3:b8:41:85:4d:be:85:fb:94:60:7d:9a:48:3d:
                    c1:04:87:60:ff:f5:46:37:c3:8f:28:bb:b6:5d:e6:
                    4e:24:6f:07:3f:17:fc:c1:87:c1:94:aa:4f:f9:1c:
                    9b:1b:f4:88:bb:48:df:98:0b:6b:c3:1c:74:fb:ff:
                    5a:15:ed:f0:f0:4d:35:8d:51:a2:e1:d1:e8:01:37:
                    89:35:18:b2:e8:34:d9:81:46:14:fe:44:77:6a:12:
                    49:b9:61:c0:7c:52:30:b3:f5:ee:1b:7f:71:63:85:
                    9a:d4:a9:c0:74:ea:09:04:72:99:7b:99:2c:ac:b1:
                    4e:2f:6b:2c:cf:4b:27:b7:17:27:c1:02:84:c6:ba:
                    4e:8f:77:07:d5:39:04:4f:f8:2b:7b:ee:4d:be:e6:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:AF:1F:91:A8:B1:12:C3:92:E5:9A:03:7E:65:C1:AC:A6:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:75:65:a1:4e:13:cb:bf:30:73:18:80:69:6a:3a:8c:36:80:
         d4:50:e5:67:88:1a:a7:06:03:50:cd:45:f7:de:91:d4:4a:66:
         87:86:f2:1c:fd:76:68:d0:7c:ea:7c:a2:7f:2e:4d:97:05:16:
         6c:e1:aa:b3:e4:ad:56:62:f0:86:65:04:21:e7:d3:f8:d9:a5:
         a0:4a:b7:7b:1e:b2:23:d4:f9:e1:1d:02:24:76:44:9e:73:22:
         83:f3:05:1a:10:60:f0:52:45:a1:33:ad:25:64:4d:8e:b2:a6:
         48:f7:18:1f:4c:3f:9c:b5:da:0d:a1:4e:1d:89:0e:f5:dc:11:
         47:cb:8c:4e:b8:3c:22:02:cc:30:aa:e9:e6:58:96:57:61:f7:
         a7:13:1b:b1:8d:04:f7:11:10:e8:9e:ce:bf:0d:dc:9b:58:35:
         2e:d5:c3:b7:ad:c3:d9:79:5b:7f:4a:e3:34:d8:ec:47:3a:a3:
         2f:77:84:24:bb:7d:fa:9b:47:62:a0:4a:56:ff:36:fe:b2:cf:
         5e:36:9f:b3:32:bc:2b:84:d8:37:b6:88:59:3f:a3:8a:69:da:
         44:03:8a:09:70:be:95:18:e4:1d:d6:f2:e1:2f:35:14:42:e9:
         e2:f5:d8:8b:e0:b0:cf:da:c3:a2:4e:cc:a2:5d:16:93:46:40:
         c9:93:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:32:07 2024 by rpki-client on console-fra.rpki-client.org