Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
File:                     90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa (raw, json)
Hash identifier:          Dqh2Hvc1jCnedbtzxVectaREnWgXFIRG8eveB5MzpUs=
Subject key identifier:   4B:59:44:B8:8B:2C:69:41:7B:4E:56:64:C1:40:8C:AB:63:0D:88:EF
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285845D39E622C47E0FB11F7CA8AE0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     393365
IP address blocks:        162.244.102.0/24 maxlen: 24
                          162.244.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:62:2c:47:e0:fb:11:f7:ca:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=4f88d402-7ac5-4c0d-96db-22fce90bf07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:3e:60:93:8f:ea:ce:df:78:64:1e:2a:97:
                    26:5d:39:9f:9a:3b:c2:6f:61:b6:c0:04:21:42:1e:
                    d9:b8:01:b9:64:b7:96:9c:93:94:f2:e9:04:01:49:
                    bc:75:e7:6a:8c:6a:3b:a2:b6:84:02:d0:04:1a:b8:
                    5e:29:3c:ad:7b:64:78:24:ef:69:67:c7:95:8e:84:
                    66:12:16:b6:16:03:a5:aa:3e:7e:c0:ec:84:df:c3:
                    6e:a9:f3:71:5a:46:c4:6e:e1:92:5a:cd:e8:c0:86:
                    0d:64:4f:4c:87:9b:79:cf:dc:0b:c6:50:8d:a9:fd:
                    7a:8d:ca:60:d5:cb:10:1f:b0:bb:f3:2a:14:04:88:
                    5a:d1:40:6d:ec:f9:96:d5:98:f1:cc:10:bf:0e:3e:
                    30:c5:14:91:84:0e:94:5f:33:3e:50:9c:07:dc:e0:
                    71:78:9b:20:e6:9f:22:e3:38:95:a0:d4:2a:de:37:
                    90:a1:e7:d6:75:5c:74:c3:36:7b:83:c7:3e:ec:fb:
                    be:8d:f2:51:6a:b3:ab:9a:b1:21:c8:a5:f2:f0:0b:
                    82:d6:25:d3:51:c3:e0:3d:70:b0:25:84:19:79:69:
                    cd:3b:28:8b:26:b7:74:91:f4:09:6d:4c:90:f2:4c:
                    52:3b:cc:25:66:00:d0:37:3c:c6:05:f1:d1:eb:27:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:59:44:B8:8B:2C:69:41:7B:4E:56:64:C1:40:8C:AB:63:0D:88:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/90d6b0eb-18b3-37de-b777-9baf4e3f9089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:f9:2b:5d:66:4d:b8:9b:3d:64:ba:c6:15:d0:d2:a8:78:
         5f:5c:48:98:5f:ea:16:fc:36:60:38:ac:6d:36:03:57:f8:89:
         dc:55:dc:1f:49:54:86:74:6a:44:e1:5f:ac:e7:31:f5:22:52:
         8b:d1:17:4e:e8:b0:42:98:44:b9:49:44:30:d2:1b:b4:38:9a:
         a5:bc:aa:3a:a9:7a:fd:97:f2:f5:53:91:e6:ec:56:2d:35:87:
         45:8a:87:a0:7c:85:6b:b0:7a:0f:e0:d3:14:07:6f:a5:6b:02:
         60:8f:b0:92:7d:f1:9d:54:17:6e:84:a5:fb:63:30:6d:dd:7b:
         85:c4:5b:99:68:bc:a8:87:f7:ac:ae:9e:63:a9:1e:47:08:03:
         e9:29:48:85:55:ee:57:a6:c0:27:db:d1:08:a3:de:c3:30:d0:
         17:80:a4:20:60:01:60:11:48:e0:2a:9c:96:06:78:59:18:71:
         3c:0f:d6:47:71:78:4d:4d:bc:8f:bf:ad:39:8f:86:47:46:77:
         14:87:c8:8b:d5:0a:18:16:f3:91:00:2e:be:21:ba:64:76:3b:
         f4:9e:fe:94:95:eb:8d:56:4d:54:35:9d:e5:87:ec:69:2a:52:
         27:b2:78:f7:94:28:a7:ea:83:a5:29:48:54:b8:88:26:fd:6e:
         6c:63:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:54:25 2024 by rpki-client on console-fra.rpki-client.org