Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
File:                     8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa (raw, json)
Hash identifier:          keq50Z0JOBwd5Z2t13BE/1Dy+nGx5KmADiElHSJQrUI=
Subject key identifier:   B3:DA:E3:E5:EE:49:5E:49:43:82:DA:B9:8A:46:74:95:D9:11:8F:30
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F43285845AC8A17496C0B90711CF3CA80
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        192.80.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:17:49:6c:0b:90:71:1c:f3:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=b8d701ff-1378-4483-b393-b04e98bcab83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:dd:c1:ac:c3:64:c0:16:dc:d5:62:b0:98:
                    ec:f2:88:2d:b3:d8:05:41:05:19:c4:e2:ce:1b:78:
                    03:dd:4b:bf:92:ba:9a:54:45:0f:eb:08:e9:3b:4f:
                    06:69:17:1f:d5:f9:ec:63:a6:90:8c:4a:1a:33:01:
                    55:d8:ff:02:09:6f:82:2b:ee:0a:d6:74:24:8a:90:
                    db:75:d7:5a:d5:04:5f:ab:84:8a:9c:ff:8b:2f:91:
                    0d:f3:d1:47:7f:f0:2a:25:b1:6d:13:bd:f0:6e:16:
                    32:ef:00:7b:59:d7:75:e7:6c:b7:7c:7c:f7:7b:83:
                    d7:e1:de:88:7a:4b:e7:f0:38:d3:8b:ca:2b:72:3f:
                    74:f8:ea:eb:c6:3a:5d:6f:b2:83:e6:36:b9:64:0d:
                    82:b9:51:6e:58:82:a1:4f:a8:ff:77:c5:3d:96:93:
                    6e:c2:95:c3:7b:4c:d8:b7:bf:70:ba:f5:fb:bb:d2:
                    b9:3f:db:88:78:20:bd:75:bd:9d:91:df:08:2d:c4:
                    80:dc:06:ac:15:fd:8b:80:2e:e8:9d:e6:5f:fd:75:
                    8f:83:99:f4:5f:cc:a8:15:d7:a5:60:c2:23:e4:98:
                    46:c4:db:38:f7:0b:85:7f:96:ea:11:55:b9:02:62:
                    29:8b:ba:74:e7:bb:45:8f:6e:98:76:f5:d0:41:50:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:E3:E5:EE:49:5E:49:43:82:DA:B9:8A:46:74:95:D9:11:8F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:30:8b:37:98:0a:54:7a:c7:85:73:dc:cd:76:35:69:31:61:
         fc:ea:09:e0:37:c6:bf:ad:b1:48:d0:37:fc:a5:26:9f:08:07:
         df:b7:06:51:2c:37:ff:6a:47:6e:8b:a7:7c:d0:ee:08:d2:e9:
         49:d0:22:d7:10:e1:a3:14:10:69:76:0d:a4:e8:7d:80:a4:51:
         65:b1:c3:cd:01:37:e2:d3:de:12:d8:a4:bc:3c:d4:8a:ed:5c:
         30:fe:78:0f:6c:8a:2c:b7:ff:18:69:bd:33:e7:b9:fc:a5:f5:
         fc:c3:01:13:f4:bd:b4:f8:0e:02:38:40:18:6e:fc:43:17:ab:
         9e:18:ba:9c:7a:d8:b6:da:47:cb:f4:c4:1b:3c:96:b8:34:29:
         c0:55:14:4d:e7:8a:bb:7a:02:37:da:98:8c:57:42:5d:c9:37:
         a7:71:7f:3c:0e:27:e7:ef:78:28:6f:47:ba:a8:e5:40:fc:60:
         1e:8d:bd:9b:ac:94:5a:4e:2a:09:2d:37:73:b2:bd:45:76:ca:
         b0:5d:37:69:ae:0b:20:f4:db:71:4f:b3:53:3b:f6:71:8e:50:
         0f:4a:99:82:fa:ae:3b:f0:36:ec:2e:4c:db:e5:f0:73:4f:c3:
         27:f0:8b:71:08:00:21:7f:7e:57:88:4b:86:af:47:dc:12:74:
         db:72:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:11 2024 by rpki-client on console-ams.rpki-client.org