Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
File:                     7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json)
Hash identifier:          ihSATEJS67OylVU6TLSOHg2lYAXsEej4ZUuTOcVHO2c=
Subject key identifier:   42:25:65:38:F1:0C:61:44:87:5D:57:18:E9:7F:57:CC:EA:D2:75:F0
Certificate issuer:       /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial:       010D0C9F43285844EECFFC93D1660ED700BFD080
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     198949
IP address blocks:        204.52.252.0/24 maxlen: 24
                          198.177.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fc:93:d1:66:0e:d7:00:bf:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=a510bc1b-0b87-4d30-9e76-6851d43883d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:6c:28:e8:30:96:b1:3b:1f:90:ae:fe:c4:
                    e6:97:a9:11:6a:ed:23:34:01:12:98:15:e9:20:b1:
                    fe:0c:bc:61:e6:c9:12:ec:2a:ba:88:74:48:e6:c2:
                    10:82:06:63:c0:e7:e3:6d:6c:28:9a:e1:54:c4:0b:
                    d9:a7:c3:41:f2:18:f1:a9:09:85:c1:9b:5d:f6:5a:
                    9b:1b:7e:80:52:6d:45:56:2b:36:40:16:9d:c2:8e:
                    c6:74:b4:4d:ed:af:46:e9:9f:ae:eb:c0:3f:11:96:
                    cb:18:56:83:74:e8:57:35:db:61:cb:65:ca:fe:9f:
                    92:9c:40:45:32:be:8a:08:fe:cf:0a:cf:15:64:b2:
                    59:93:d0:16:a0:e5:85:a5:b7:54:3a:67:73:bd:40:
                    c6:1e:0e:15:4d:24:9f:31:16:cb:a2:2e:1d:21:12:
                    4c:91:35:14:78:f8:cd:de:b2:d8:f9:b8:bd:b1:51:
                    3a:ee:8f:f9:f1:da:d2:5c:fa:8d:4e:3d:26:c7:b1:
                    2b:c0:64:c7:b2:65:38:0e:1d:9b:ac:b0:33:a0:5f:
                    53:6c:10:01:37:9e:92:b9:10:86:7d:a9:5f:48:38:
                    56:56:60:9e:db:5f:ec:44:70:e3:73:8b:ce:ab:f3:
                    c9:67:cc:34:14:a7:b1:b8:50:8d:3a:09:48:c8:33:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:65:38:F1:0C:61:44:87:5D:57:18:E9:7F:57:CC:EA:D2:75:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl

            X509v3 Authority Key Identifier:
                keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.154.0/24
                  204.52.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:98:ec:0e:2e:81:ef:54:9b:68:fa:be:50:ef:cc:58:05:79:
         e9:13:66:8a:47:08:d8:5c:a6:2b:2c:4f:a1:b8:cc:d7:c5:e8:
         c6:0a:5d:6d:68:ae:fc:96:c5:4b:1e:b4:4f:25:b7:eb:1f:57:
         89:89:6a:9a:28:d6:6f:50:c3:a9:e4:ab:ef:23:ca:d6:12:ac:
         8d:6a:0a:d1:fc:79:1f:46:d0:78:e9:c3:5a:5d:c7:7a:09:95:
         8e:dc:93:2e:c0:7a:12:06:7d:3a:1d:fe:d3:b0:75:42:c1:51:
         cf:cb:af:ef:fb:fd:d7:99:91:0c:cc:c8:b6:2e:30:c0:23:1b:
         a1:4f:13:04:13:ed:ee:53:46:aa:83:88:45:a5:a9:5e:dd:f4:
         9d:45:0a:fc:48:8b:f6:fd:ed:fa:21:27:af:fc:af:4d:77:14:
         3e:39:cb:20:ce:2a:c9:17:83:44:ef:6e:2a:03:ba:9c:31:70:
         eb:8f:5c:95:99:ae:d9:83:47:1c:3b:37:7c:b0:0a:7c:7f:ae:
         2d:c7:e2:99:59:f8:86:dc:82:4e:1c:32:b3:6b:4d:fb:d2:d6:
         3c:bc:bb:92:ed:ea:70:f7:ff:30:26:3c:e2:cf:77:bf:c1:0a:
         9f:da:5b:c2:64:0b:b8:15:54:92:56:50:25:f3:d5:71:de:e3:
         a1:bc:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:42:39 2024 by rpki-client on console-fra.rpki-client.org