Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa
File:                     fc8d790d-3854-30a3-ac52-4854a52b7835.roa (raw, json)
Hash identifier:          RHKkr/hgeWn7QGSzTc2ZKjKYtzyGPBCfF1Ry3ql01M8=
Subject key identifier:   F8:3D:BD:D5:6A:2A:95:A3:A1:38:63:08:48:6D:72:5A:C2:00:41:C1
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E309EAEEFB3375462D500
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18434
IP address blocks:        156.55.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:30:9e:ae:ef:b3:37:54:62:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=90afc8dd-b154-4c7f-a218-aafecd00da55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:ed:40:da:df:82:e3:bc:9c:66:7a:f9:90:
                    e2:8e:2d:cf:33:0e:f0:8a:23:cd:e3:ee:e9:16:1b:
                    ad:c3:2b:a9:b8:35:12:44:65:49:fd:45:55:e3:0c:
                    d5:85:50:f8:ec:aa:3d:c8:69:a6:6c:83:eb:66:93:
                    26:60:40:b4:af:7e:2e:f2:34:40:b2:c7:ae:35:41:
                    29:c1:c1:ff:2c:6b:9f:f5:fa:e0:32:7f:4d:77:e8:
                    2f:b2:c9:89:f1:f9:ec:ba:48:be:9f:be:58:6b:7e:
                    12:22:70:f2:2c:37:b2:9d:e2:6a:e5:87:95:6e:25:
                    a4:17:06:38:4e:5d:10:c2:f2:53:61:33:68:37:5d:
                    2b:5b:11:80:f3:52:cd:8c:1b:e7:e8:0a:af:ad:ba:
                    14:90:52:17:7b:97:11:92:84:fe:4c:c9:25:4b:d8:
                    a7:64:ac:5a:91:37:23:f8:bb:e0:28:cb:a0:74:5e:
                    3a:7f:b4:4c:8d:80:28:66:b7:8f:0f:b8:81:8a:92:
                    b4:97:6b:e3:a6:bc:b4:6f:ca:79:f6:73:77:f2:dc:
                    fc:c2:6c:2f:8c:d4:f2:51:dc:38:f4:63:c9:4e:80:
                    8c:db:fe:e3:e5:32:17:70:ec:6b:ab:b1:a7:7a:8c:
                    f6:c5:33:52:ad:dc:59:9c:80:fc:10:87:f6:f8:02:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:BD:D5:6A:2A:95:A3:A1:38:63:08:48:6D:72:5A:C2:00:41:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/fc8d790d-3854-30a3-ac52-4854a52b7835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:77:af:90:62:bf:cc:99:b4:38:d6:04:80:ba:89:b0:86:fc:
         80:3c:88:62:11:be:9e:cc:f6:34:7d:e0:94:9e:50:7d:6b:93:
         78:c2:44:e6:a2:6c:05:26:07:d8:31:e0:02:eb:6b:96:02:cc:
         34:5f:05:48:74:3d:2e:55:e8:d7:56:45:74:c9:29:12:44:19:
         12:c5:7d:d4:a0:bc:18:1d:fb:a0:5f:36:f1:57:75:30:23:d1:
         2a:99:f4:bb:79:aa:33:24:2a:e6:fb:eb:ac:14:e6:a8:bd:53:
         3e:07:41:10:fd:52:27:1a:b1:8c:d6:dc:60:78:72:6c:cf:7e:
         16:87:45:1c:7e:7a:24:a9:5b:d0:cf:46:c8:c7:00:7f:54:f8:
         22:86:29:b3:12:23:a4:f7:39:ea:ce:97:15:7e:9e:dd:b4:95:
         90:6b:06:75:cc:13:d4:e4:52:20:b7:ed:91:cc:1d:70:99:94:
         fe:e1:6c:c3:ae:47:86:64:04:87:ef:d8:95:72:c2:4c:0c:76:
         b9:de:b9:82:9b:ba:22:31:5d:dd:90:bf:52:52:69:a9:61:ea:
         67:71:08:a3:fc:6d:f5:bf:55:38:d4:0a:29:96:50:e8:10:87:
         02:32:1b:71:5f:ee:2b:f1:4d:aa:e0:4b:d8:92:b1:a5:3a:b8:
         06:d3:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:47:16 2024 by rpki-client on console-fra.rpki-client.org