Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa
File:                     60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa (raw, json)
Hash identifier:          9FehAE1MmOuomP/RID/WObMXC20S6/8Kc+9HUzIVpsk=
Subject key identifier:   45:46:5D:71:63:EB:9C:EB:40:F5:EA:09:B7:F9:CA:BA:44:7E:1F:00
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584548081A2D4EEC28247801F300
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     22885
IP address blocks:        199.0.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1a:2d:4e:ec:28:24:78:01:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=125b6253-0c64-4dfb-a435-fc24c8d71d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:cc:84:e2:0b:3b:27:62:25:3f:c8:64:bf:
                    74:21:c2:7f:f5:a7:fe:23:04:cb:8a:87:5e:8e:2e:
                    db:b7:b8:9a:f3:a7:e6:6c:5b:6d:82:ae:91:d9:d8:
                    08:a3:83:a5:f3:eb:86:7c:2b:48:bc:d8:d7:bf:26:
                    7e:8c:26:6f:49:27:0e:f0:10:b7:05:bc:96:b1:2f:
                    cf:06:67:c6:7a:53:23:85:64:34:f5:6b:e8:5a:d0:
                    6c:2d:e4:a1:34:33:6b:31:db:9a:e4:1d:f9:66:3c:
                    c6:ab:d3:ce:69:02:b3:36:5e:bf:9e:cd:d4:47:4f:
                    41:a6:78:8c:d6:eb:80:83:79:2a:36:67:64:42:d6:
                    51:9d:d5:ae:d2:cc:ea:18:cb:a8:7f:9c:08:79:25:
                    4a:64:32:dc:41:e6:0b:3c:4f:ea:59:f3:4f:b9:88:
                    a3:49:b2:bb:a6:89:4e:64:a2:3e:30:44:22:79:0f:
                    37:4a:31:28:51:4f:f8:c1:ab:38:bb:91:fa:8f:b3:
                    ed:a4:22:5d:a3:7e:9b:53:9f:3a:9b:2d:b2:9d:47:
                    42:ab:67:f0:c4:f3:2f:34:9a:9d:f1:dd:16:b7:0d:
                    44:14:21:b2:09:20:8c:00:be:76:be:36:89:db:4e:
                    08:88:37:6f:bb:76:c1:93:61:1d:0f:ec:d7:ff:64:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:5D:71:63:EB:9C:EB:40:F5:EA:09:B7:F9:CA:BA:44:7E:1F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:11:ec:5b:da:e8:ce:61:12:9c:f3:43:e1:b9:ac:80:00:
         8f:09:6b:ec:93:d3:87:e9:eb:30:68:b7:9e:7f:0b:b0:81:4e:
         b7:12:28:d9:e3:91:ec:c6:66:4d:eb:54:77:4a:10:de:69:74:
         10:1d:27:e5:f4:25:ee:a6:3e:c3:92:e9:cd:6e:84:d0:3f:e7:
         3d:82:7b:c3:40:1d:ae:2f:d0:e8:6d:0a:1b:81:2e:be:12:48:
         01:26:52:6e:cf:b8:9c:c2:54:2b:cc:6a:a0:d6:4c:85:1d:9e:
         52:47:33:31:85:d7:ab:5a:fb:d9:8f:25:8d:35:30:94:78:4d:
         f2:13:3c:5a:0d:23:a1:84:4d:e5:ea:42:b6:33:ae:3f:bb:32:
         d1:a9:64:06:32:bb:f5:a8:ae:cf:8c:41:c8:be:a7:35:a3:77:
         4c:2f:a5:e7:49:1b:90:9b:a0:e7:50:09:b2:d6:f6:ca:94:34:
         6d:06:2b:bb:f6:a5:61:ed:5b:f4:b3:63:c1:de:dd:62:0b:b1:
         ae:f3:a2:1f:e8:90:2a:47:bb:db:c8:52:cf:25:ae:55:24:65:
         0b:54:4f:22:6d:50:da:f9:ad:70:a3:a4:74:86:29:e7:16:f4:
         b5:77:e7:55:a8:89:a7:b3:8f:b8:25:c7:d4:33:0f:0d:42:ee:
         11:47:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:34:01 2024 by rpki-client on console-ams.rpki-client.org