Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db1d1851-580f-3d94-9c5e-9454d9d5e415.roa
File:                     db1d1851-580f-3d94-9c5e-9454d9d5e415.roa (raw, json)
Hash identifier:          D/QI6NyNdEh6U4Ts5MMwx/J8lq+SIOdvZ7hfXwp/SuE=
Subject key identifier:   87:C3:83:9A:A0:04:ED:F9:5C:90:29:91:55:95:08:3F:B2:16:EF:02
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285845D461A359596AFCAF410B2880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db1d1851-580f-3d94-9c5e-9454d9d5e415.roa
Signing time:             Fri 10 May 2024 19:34:10 +0000
ROA not before:           Fri 10 May 2024 19:34:10 +0000
ROA not after:            Thu 08 Aug 2024 19:34:10 +0000
asID:                     399989
IP address blocks:        198.20.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d4:61:a3:59:59:6a:fc:af:41:0b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 10 19:34:10 2024 GMT
            Not After : Aug  8 19:34:10 2024 GMT
        Subject: CN=959e2a75-1c9a-44bd-9539-f36a746dda73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:57:a9:c2:30:2c:24:90:bf:f8:d2:e6:27:
                    1c:be:a9:19:aa:4e:9a:55:7b:a7:d1:54:19:2f:63:
                    36:4c:22:73:88:7d:56:2e:8d:6a:0d:01:3e:05:6b:
                    4a:2e:69:54:b1:80:16:8b:11:84:81:bc:27:4c:ac:
                    ca:5d:4c:82:e9:af:0d:cf:92:4e:72:39:c4:75:6b:
                    54:42:fe:84:eb:6e:b3:36:e3:86:76:21:fa:7a:39:
                    93:8b:cf:17:ea:3b:da:2b:c5:af:77:e2:a9:6c:a3:
                    6d:ce:84:b1:a5:bf:68:08:59:fa:33:41:bd:13:18:
                    bd:7a:cd:32:f5:0f:62:40:18:70:fd:ef:aa:b3:a1:
                    47:54:3e:d6:b5:fa:bb:18:f8:0c:4e:a8:47:1f:7d:
                    be:7e:53:49:90:db:1a:62:15:f4:d3:0a:26:27:5c:
                    95:7c:8e:8c:3a:14:63:19:3a:b0:78:50:34:65:c3:
                    da:2c:5f:ae:6d:40:a6:6e:80:95:11:2e:aa:77:82:
                    d7:58:98:4a:a9:86:da:66:b4:d4:78:45:04:c7:57:
                    29:34:d2:02:00:ad:9e:74:61:65:aa:cb:70:01:0f:
                    81:e1:5d:33:0a:fb:d3:ed:f8:4e:8a:c8:f2:09:c2:
                    e2:70:b5:4f:a1:f2:20:a1:9a:74:30:6c:2a:69:a0:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:83:9A:A0:04:ED:F9:5C:90:29:91:55:95:08:3F:B2:16:EF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db1d1851-580f-3d94-9c5e-9454d9d5e415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:ef:6d:bc:d3:19:27:4d:82:9d:7e:ce:2b:b9:e8:9a:91:
         50:ce:51:63:d8:84:b0:e6:70:c5:53:a2:c0:40:da:bf:60:26:
         7d:d8:b6:dd:35:1e:f4:a1:80:c9:00:b1:0c:47:a4:48:ad:fb:
         bc:f4:34:2b:fc:eb:f5:5e:91:ea:89:c8:4e:97:c2:d1:9b:56:
         92:e3:e0:82:0c:85:d1:b7:fb:d0:d0:d0:f2:d4:06:d2:65:75:
         86:88:b8:d6:03:86:35:a8:fd:9f:77:32:c3:a8:08:50:52:e7:
         d1:a7:dc:6b:0a:39:54:b9:ed:89:e2:1c:ae:6a:47:99:d8:5a:
         6e:58:14:dc:85:59:0e:f1:00:da:af:89:c4:cc:c3:49:64:4b:
         3a:61:44:14:ec:d1:df:68:e1:b7:cc:e4:35:3d:02:d3:c8:21:
         ca:d3:1e:e0:2e:a7:2f:25:8f:10:7b:b3:f7:d7:5e:69:f6:bf:
         60:e1:72:73:cd:7a:b9:95:e3:0a:92:6d:e5:2a:4e:15:27:53:
         26:a6:67:af:50:19:99:93:d2:5b:ca:9a:9e:7e:67:aa:10:3e:
         68:0f:db:4c:96:7b:e5:c5:83:28:94:07:7e:84:c8:3a:9f:31:
         5b:d4:e9:54:47:1b:84:5d:9b:12:0d:82:e4:bf:4c:c0:ef:b1:
         59:1c:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:12:05 2024 by rpki-client on console-ams.rpki-client.org