Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa
File:                     5368e9b8-712e-3eaf-a366-757c94d5124e.roa (raw, json)
Hash identifier:          /15PSyzefpXZL0T/Zos3yDVk3UfLpCZLR/rrX0sT4U4=
Subject key identifier:   02:DF:19:27:E8:78:B4:C3:64:E7:80:4C:C1:E4:5F:02:54:B5:E0:0A
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285845139B0F37241FB01435B57F80
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa
Signing time:             Sat 02 Mar 2024 18:18:52 +0000
ROA not before:           Sat 02 Mar 2024 18:18:52 +0000
ROA not after:            Fri 31 May 2024 17:18:52 +0000
asID:                     14618
IP address blocks:        199.66.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:9b:0f:37:24:1f:b0:14:35:b5:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Mar  2 18:18:52 2024 GMT
            Not After : May 31 17:18:52 2024 GMT
        Subject: CN=23685e19-cada-41ce-b61c-334f8f399e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:f0:10:db:11:f5:10:4a:11:cc:b0:66:2e:
                    0c:47:3a:8f:48:bc:a9:19:f6:2c:ba:6d:6c:46:7b:
                    a1:16:98:43:15:84:55:4a:4a:a9:74:95:f6:17:66:
                    dd:4a:ef:cc:51:d9:c0:48:83:67:96:1f:2d:27:de:
                    53:44:1c:42:a1:44:03:f4:05:48:13:97:0b:87:9c:
                    2e:fa:5f:72:24:53:92:1f:a2:6a:eb:70:b6:bf:5d:
                    d0:e5:5e:c1:e5:dd:1a:b6:dd:24:7b:2d:d6:0f:92:
                    95:34:28:f0:60:31:a7:a2:15:19:b7:77:7c:fb:14:
                    7f:96:b2:d1:29:19:a5:00:c2:2e:c3:47:6c:19:cc:
                    5d:15:6e:87:f6:03:df:d4:da:d9:90:dc:69:4c:c4:
                    d4:61:fd:35:01:7c:f4:ca:e7:cc:96:4d:f8:dd:a6:
                    60:80:5e:67:0f:e1:5d:a3:66:a9:54:27:c8:a1:38:
                    77:01:4f:37:a7:eb:b3:15:b4:04:d5:d6:89:29:7a:
                    c0:7f:48:5e:6f:83:4e:8e:78:c9:96:85:02:0b:7f:
                    64:65:a0:13:54:d1:a2:87:55:e6:7a:cd:4a:bd:ca:
                    c7:e6:80:61:d1:dd:c5:4c:27:86:30:98:18:ed:75:
                    dc:b8:fc:af:7f:77:fb:ab:8b:d7:12:e4:b8:64:6f:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:19:27:E8:78:B4:C3:64:E7:80:4C:C1:E4:5F:02:54:B5:E0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:c8:0b:ec:4a:ee:e3:28:19:e8:b0:09:c3:3c:d8:58:b3:
         e0:1d:2d:ed:6b:d1:60:9e:94:9a:86:81:c0:c4:c7:08:7d:77:
         09:77:52:b8:9d:20:f2:d0:5d:db:b2:03:d3:87:9a:8e:4d:f7:
         a0:ac:9a:c2:6d:8b:ac:d0:d0:bf:2f:c0:6e:2a:49:cf:2f:8d:
         61:eb:ef:98:2d:2d:3a:b6:95:94:f4:de:1e:83:6b:6d:53:ff:
         60:ca:58:a0:f5:e4:a7:48:02:1b:02:d2:34:fe:41:b7:e0:a8:
         26:5a:80:42:0f:b5:b8:b9:db:51:a4:4c:1b:54:09:57:f4:50:
         c2:91:f6:4f:f0:b0:4c:65:c7:98:1a:03:96:c1:3b:e4:3e:e3:
         28:68:63:4a:32:51:11:88:69:4f:8a:12:32:4c:21:4b:c9:2b:
         5a:5f:5a:9e:31:57:f4:c2:1e:f0:fe:13:3b:39:76:16:07:96:
         07:71:37:26:2f:26:17:35:ce:39:a0:0e:7c:dd:00:8b:a5:f5:
         45:48:cd:e7:fa:db:31:c5:b3:14:c9:54:c0:b8:4b:5d:b7:e9:
         96:5e:e4:20:1f:fa:ac:56:91:cf:a2:4a:3f:31:3a:ec:4b:78:
         60:cb:05:ea:cb:70:74:26:06:b9:88:78:11:36:43:d7:c2:99:
         d8:c7:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:29 2024 by rpki-client on console-ams.rpki-client.org