Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa
File:                     cee5e224-e222-3e38-b4fe-225e5e2c6216.roa (raw, json)
Hash identifier:          FjZHd0NlZ98SIw5lR54yk0jv+mjnFz7Jnu5Nf7SQQT4=
Subject key identifier:   23:BE:4F:3A:A9:27:9C:0F:88:D3:1F:31:90:36:C8:57:61:F1:4E:9C
Certificate issuer:       /CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
Certificate serial:       010D0C9F43285845D0D3A6B0976DC9512F3B8600
Authority key identifier: B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     226
IP address blocks:        192.124.99.0/24 maxlen: 24
                          192.124.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a6:b0:97:6d:c9:51:2f:3b:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=cb839076-42cd-4da4-992c-0c4b3810d294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:fa:8b:7a:65:64:66:c7:ad:4a:26:f2:c9:
                    5b:d4:dc:11:ca:1b:16:ce:ca:a8:bd:f6:b8:59:9b:
                    d2:87:fc:26:58:73:b4:d6:bd:17:74:97:bc:3f:af:
                    1b:78:65:84:82:fc:17:41:f2:ba:95:65:e0:a7:f2:
                    02:55:2d:de:9b:da:e3:a4:e8:7b:62:62:b0:1e:52:
                    00:8e:7b:f5:51:f7:fe:de:21:74:aa:f2:f8:55:f3:
                    05:88:f9:c0:ca:cb:71:0e:f1:06:21:2f:f5:a0:5f:
                    6d:2f:4a:ff:6e:43:40:49:14:e2:32:d7:77:6d:08:
                    21:f0:40:ca:59:98:bb:ba:f6:9d:12:3e:5b:c6:ba:
                    63:f8:0c:c0:45:64:c3:52:62:98:2d:73:03:32:88:
                    b5:67:08:30:e8:4e:b3:30:f8:c0:be:5f:c4:66:75:
                    0c:55:24:96:08:21:4c:ce:d1:d2:32:13:59:6f:3f:
                    38:3f:65:cb:7b:26:54:ec:45:eb:4e:e5:68:e0:50:
                    65:54:6c:73:ca:74:f9:99:f2:72:3a:1d:e2:07:bc:
                    77:cd:48:82:4d:07:c9:c7:66:b1:3c:aa:80:58:08:
                    f0:46:91:29:0f:95:73:2f:41:e3:a7:6c:4f:c2:47:
                    f5:2a:e6:13:27:1a:8b:b3:e9:76:1c:2f:02:75:a2:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BE:4F:3A:A9:27:9C:0F:88:D3:1F:31:90:36:C8:57:61:F1:4E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl

            X509v3 Authority Key Identifier:
                keyid:B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.99.0-192.124.100.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:26:d5:31:69:89:e8:08:9b:36:48:28:a7:f6:63:c0:5c:97:
         77:23:37:2f:28:f1:47:cd:42:03:5c:73:c0:18:d5:12:d8:a2:
         c1:1a:69:5c:95:a8:4e:91:e4:8f:83:f6:b0:87:21:82:0a:bc:
         92:a3:da:fd:64:37:e7:ee:22:03:9b:58:19:ab:ad:dd:e3:ac:
         f5:dd:54:26:8d:ac:bc:9f:51:86:b2:28:be:e7:9c:4c:4d:c7:
         27:af:e9:52:d1:60:34:0e:89:62:47:ed:4d:bb:63:a4:e5:c5:
         60:e7:44:77:57:b2:d2:9f:d4:13:ce:c9:ad:07:ac:98:31:c9:
         0f:01:61:18:5c:71:d1:1d:aa:51:18:a5:67:27:02:7e:65:6b:
         c8:3e:b2:97:cb:6c:f3:36:6d:00:4d:0c:35:c8:a4:4f:e8:9b:
         02:7b:fc:76:4d:fb:d8:4e:ce:c4:bf:55:f7:01:59:c4:3e:a8:
         03:44:19:06:be:84:d6:ec:20:92:b1:53:18:9b:13:8d:09:a8:
         ad:45:d1:c4:b8:35:6f:54:f8:b9:e1:5a:dd:0f:f8:ec:cd:37:
         8c:ed:0f:0e:4f:e2:f8:40:d7:4c:11:76:0a:5c:2e:c3:7d:9d:
         43:0c:65:21:2e:05:1a:80:45:2c:c7:88:05:15:22:89:ff:87:
         b3:77:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:35:39 2024 by rpki-client on console-ams.rpki-client.org