Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
File:                     309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json)
Hash identifier:          jFenI3Dn82LNNSvVaJ+kf1DO7wbXgSC85j7UD2Oum6E=
Subject key identifier:   41:B0:C7:12:B5:7D:56:E6:81:BD:83:BA:98:46:4D:1E:D0:0A:93:3F
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584574B30D1B9524858F0949C8E0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        198.44.182.0/24 maxlen: 24
                          198.44.183.0/24 maxlen: 24
                          198.44.180.0/24 maxlen: 24
                          198.44.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:0d:1b:95:24:85:8f:09:49:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=6904c11a-cc68-4891-a60d-1502b22f05f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:d1:2b:74:0e:d7:03:33:c7:02:56:38:c0:
                    4f:3e:52:0d:61:0b:1d:a7:19:70:c9:29:53:97:df:
                    c1:20:8b:cb:15:fd:0f:00:a7:fa:80:ad:db:ef:c3:
                    6e:fb:ff:64:5c:d8:ab:0a:8f:5b:b6:ec:be:c4:57:
                    b4:99:2b:86:f8:bd:f6:b1:75:9e:c8:82:0d:65:e3:
                    2d:29:8e:8e:5b:76:bb:67:d0:8e:e2:4c:3a:21:75:
                    b7:0e:a0:37:f5:7f:1b:05:56:64:8b:2b:45:7e:e4:
                    c3:8f:b1:8b:2a:b9:04:4d:58:90:43:8e:54:cd:e6:
                    6f:29:c0:4e:ee:31:e1:1e:53:a9:62:f9:9b:bd:c9:
                    84:e1:36:d7:e8:cb:ac:0d:7e:dd:e4:c9:c3:2d:c6:
                    20:3a:f0:a3:77:ae:77:80:98:43:ad:9d:13:79:bd:
                    ed:9e:17:d1:f5:20:bd:81:e0:14:90:b5:44:0d:ea:
                    d7:e4:c5:96:24:55:6f:20:72:01:a3:db:6c:a7:64:
                    73:80:19:30:e1:9a:82:40:a3:07:8d:4a:8f:8b:4e:
                    5d:c6:43:d8:a4:8f:c2:5a:b7:9d:ee:62:c6:78:67:
                    c8:76:86:c2:d5:12:b9:97:03:c3:a9:c6:d3:9c:11:
                    a2:b4:85:a9:cb:01:8e:89:cc:02:42:1b:ca:2b:fe:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:C7:12:B5:7D:56:E6:81:BD:83:BA:98:46:4D:1E:D0:0A:93:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:a5:33:76:2c:73:c1:42:aa:e0:ac:4d:ec:30:ea:cd:f0:
         cb:91:1f:7a:6f:94:4c:02:4d:d8:54:fc:78:7f:47:0c:0c:33:
         75:f7:c2:d0:05:5d:be:67:47:d6:f5:f7:41:db:15:46:88:5c:
         ea:19:64:29:9f:8c:8b:44:62:7b:67:29:07:67:69:1a:22:46:
         32:43:d3:82:fe:26:32:43:43:a9:df:69:1c:47:33:32:e3:0d:
         5a:4e:25:1a:4a:7b:37:e6:71:27:5e:30:3f:c1:40:aa:30:55:
         6e:2b:10:23:9e:88:fc:17:28:00:c4:be:34:4a:29:f2:85:ab:
         db:34:1e:af:27:c5:59:95:b9:bc:2b:06:39:13:f7:e4:42:bf:
         de:46:2a:e8:0b:59:5e:2b:0c:b2:d2:c6:fe:70:41:ef:09:b2:
         05:7d:b2:1f:88:98:97:7e:3d:37:9b:ea:7b:c4:76:5c:18:9d:
         ff:43:d0:07:71:65:d2:47:0e:31:61:40:74:44:ad:33:74:4f:
         81:c2:f2:31:44:d6:2a:4f:e8:7b:c2:db:a1:73:71:f3:94:fe:
         48:21:92:03:7f:73:94:5c:da:12:f4:f9:af:72:99:38:52:ed:
         7a:9e:95:b2:0d:19:46:54:96:4f:4a:3a:81:ad:df:05:c6:65:
         33:27:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:50 2024 by rpki-client on console-fra.rpki-client.org