Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
File:                     9be939da-ddc1-31ed-811c-e2e734533c03.roa (raw, json)
Hash identifier:          0R8GB4MwvkS6ms8e83p+AT/zP1M7F9x3ainsKkchDSE=
Subject key identifier:   99:FF:B8:D3:53:37:E4:C4:A9:0D:87:C9:27:0A:B4:56:BB:C7:82:F7
Certificate issuer:       /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial:       010D0C9F4328584601AE85BCA43C44974B744180
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa
Signing time:             Mon 27 May 2024 01:00:24 +0000
ROA not before:           Mon 27 May 2024 01:00:24 +0000
ROA not after:            Sun 25 Aug 2024 01:00:24 +0000
asID:                     18540
IP address blocks:        198.148.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:01:ae:85:bc:a4:3c:44:97:4b:74:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
        Validity
            Not Before: May 27 01:00:24 2024 GMT
            Not After : Aug 25 01:00:24 2024 GMT
        Subject: CN=9bfaf28c-c7d2-43b4-8fa4-52032cfd6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:e8:79:20:bf:4c:2d:57:60:8d:cb:ac:6c:
                    f9:ff:c8:ae:c8:c0:3f:7a:20:cc:06:88:00:7f:6d:
                    b9:bb:9c:8b:a0:ce:97:70:7a:c2:24:da:22:b2:a9:
                    53:05:69:78:bd:44:ce:e1:6e:c7:80:75:a9:79:ec:
                    6d:e1:91:48:75:14:dc:4f:31:05:f3:32:79:71:c0:
                    03:ba:ba:e8:e0:d2:f7:68:a5:ad:46:04:1c:20:b9:
                    ea:fd:7f:9c:a4:92:75:5e:4e:2f:86:d1:15:2d:ca:
                    df:5e:7a:45:0f:ab:c3:9e:a1:6f:a5:0d:b7:f9:85:
                    b6:e1:aa:69:62:27:94:c3:39:ce:d2:03:2b:27:a9:
                    3f:1e:61:8e:c8:64:93:50:bc:b9:bf:5b:35:ec:4c:
                    cd:b0:0e:e3:be:14:5b:c8:bb:a9:b7:d6:00:a3:12:
                    5e:46:ce:71:c3:00:dc:bd:03:5f:b1:cd:dd:c1:26:
                    72:a3:f0:36:ca:46:4d:d5:65:7b:da:d5:13:0f:34:
                    82:5a:f2:95:e7:6b:91:a3:76:28:13:b3:83:5d:34:
                    14:64:fa:04:ab:f7:b8:89:f8:3a:0a:c5:c9:a2:f9:
                    a1:d5:ab:9b:c6:43:3c:59:c4:20:d2:5e:c2:57:1c:
                    7f:92:50:cf:b4:b4:b6:e2:fe:3e:4f:d8:c9:7a:8d:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FF:B8:D3:53:37:E4:C4:A9:0D:87:C9:27:0A:B4:56:BB:C7:82:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl

            X509v3 Authority Key Identifier:
                keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:3e:e3:23:28:c3:3a:66:7e:25:1f:07:98:67:eb:cc:9a:
         b7:67:b1:76:e6:68:3a:56:d0:51:79:71:0c:2d:74:aa:6f:96:
         1c:4d:3a:84:9c:6b:04:b3:79:09:d5:54:f2:ec:82:42:21:1a:
         e1:1a:4c:0e:14:c7:0c:64:2c:f8:c6:21:1c:e2:62:df:a4:63:
         2d:6a:b0:b5:64:3b:0a:38:fc:0f:a4:44:20:aa:c6:79:d7:06:
         0a:fc:d1:d1:8b:99:25:15:a8:d2:d8:a2:52:b7:7e:5f:f1:55:
         a9:05:de:10:33:82:47:e4:fd:b6:57:a2:23:0b:f6:b9:84:81:
         2a:1c:6d:ec:ae:3f:52:57:2b:91:88:55:15:14:ba:9b:d1:4e:
         15:27:8d:43:f5:47:1f:e1:c3:20:33:64:a1:0b:a2:ac:44:14:
         03:c9:7c:36:8f:fe:e2:79:e7:cc:6f:44:c5:e1:aa:a8:5f:87:
         47:39:34:38:f8:93:13:e7:8a:1d:ef:10:57:1c:50:49:e8:e0:
         ee:00:21:2c:e7:8a:10:fc:ac:18:ad:23:02:30:7d:ab:72:42:
         97:f6:70:9c:bc:8b:33:89:44:c6:8b:9e:93:22:e8:fd:c1:bb:
         a2:ef:be:e7:cf:fe:b0:b7:4c:17:68:29:53:72:87:18:70:dd:
         2a:8f:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:03 2024 by rpki-client on console-fra.rpki-client.org