Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa
File:                     19666efe-72d0-3e30-9419-d8cdfcea80a0.roa (raw, json)
Hash identifier:          q3KUe5CDm8MtqzAjb/o4U0pTw8aoMB4542oyNix3T3Y=
Subject key identifier:   5F:7E:EB:12:F4:DB:D7:F5:70:4B:51:0C:9E:BA:C6:63:47:4C:27:B4
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285845316A7708BDCC05CE97E6F800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa
Signing time:             Wed 13 Mar 2024 10:35:12 +0000
ROA not before:           Wed 13 Mar 2024 10:35:12 +0000
ROA not after:            Tue 11 Jun 2024 10:35:12 +0000
asID:                     142032
IP address blocks:        198.44.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:6a:77:08:bd:cc:05:ce:97:e6:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 13 10:35:12 2024 GMT
            Not After : Jun 11 10:35:12 2024 GMT
        Subject: CN=e883efae-3ed9-4a66-bb61-757579caf97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:c4:94:1a:d1:31:1e:00:1b:8c:4d:4b:36:
                    0c:9c:52:6c:08:81:7b:9a:11:fb:bc:a0:ea:a9:38:
                    91:59:99:2e:5c:ca:39:14:aa:14:71:1b:9b:fc:53:
                    b8:38:7e:b2:96:19:5b:62:0b:76:cf:ba:b0:d7:db:
                    d3:a2:de:a3:18:a4:fd:54:cb:d4:f4:59:9c:15:78:
                    d0:24:92:33:77:89:f6:e8:de:bd:df:b2:b6:56:74:
                    0f:06:b6:20:c2:89:fb:51:bf:6a:9b:a4:52:14:41:
                    d8:a6:2d:21:00:f6:5d:a6:e2:b1:64:92:39:2e:49:
                    22:f7:56:ff:63:e8:73:42:5e:a4:0b:9a:66:f0:f8:
                    fc:3e:62:4e:91:29:8a:a4:09:d7:13:80:16:5e:05:
                    10:e3:59:11:2c:f6:f0:bb:e5:db:cb:13:13:50:1b:
                    9d:08:7b:85:c5:bc:9a:84:95:46:1a:49:9b:1a:3d:
                    28:69:7c:64:e4:47:64:ad:d4:d7:e9:aa:84:b3:23:
                    c9:41:6b:d9:73:7b:61:83:03:a3:9a:a2:12:a9:79:
                    60:f1:1e:58:1d:18:13:aa:98:4d:ac:96:68:ac:83:
                    88:3d:6d:24:8d:04:e7:67:9e:67:48:cb:cc:8d:62:
                    c4:6f:28:ea:9c:d6:a5:4b:e9:0c:6a:04:06:a9:f8:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:EB:12:F4:DB:D7:F5:70:4B:51:0C:9E:BA:C6:63:47:4C:27:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/19666efe-72d0-3e30-9419-d8cdfcea80a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:66:bb:7c:19:9e:93:39:3f:d0:c4:57:3a:1f:36:d1:03:
         13:92:08:74:3d:97:ff:e2:fd:46:f9:5f:6b:35:7a:76:dd:2b:
         4c:69:dd:72:96:c4:e2:31:cd:04:95:d1:7b:e1:b1:18:f9:75:
         16:5a:71:fb:97:6a:36:67:7f:04:3c:3a:8d:60:a8:48:ad:99:
         be:f5:3c:4b:50:8c:f5:7a:d9:26:66:59:6e:ea:0c:70:60:fb:
         e6:8e:ea:55:5f:ba:2f:fc:2d:9c:cb:2f:f0:ad:82:05:64:ec:
         6e:8d:04:6b:74:8c:51:bd:8d:87:da:32:13:4f:64:ea:76:ef:
         6e:77:b0:26:d2:23:af:51:07:e6:91:d6:50:c4:01:52:8b:02:
         75:86:13:fb:6f:fe:83:00:b5:80:4a:a2:e5:39:c4:ba:d7:9c:
         3f:87:63:12:87:37:bc:1f:3c:5b:2c:bc:c7:66:7a:30:4a:5b:
         f8:c8:70:f5:c1:c9:09:9c:a6:fa:d5:89:49:18:df:d5:72:9f:
         ce:d4:e6:be:31:4e:3e:b3:89:ba:4b:e8:c7:7d:36:7e:d5:f4:
         ec:7b:df:43:a6:78:be:9b:88:24:95:4c:e8:fb:fe:1e:c7:0d:
         0b:a6:21:84:28:a1:1c:28:0b:f1:3b:48:1c:47:23:58:21:cf:
         f6:ef:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:26:09 2024 by rpki-client on console-ams.rpki-client.org