Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa
File:                     705b7e41-2b49-31cd-b88a-3090b6f6218c.roa (raw, json)
Hash identifier:          bvEPmSGt/VuemAPt/MJB7jyWnKFaSBnYLKDUYtJhh2U=
Subject key identifier:   74:15:5F:15:A1:71:11:32:7D:F0:3F:C2:F8:21:2A:97:83:E2:DA:EE
Certificate issuer:       /CN=2044bf03-a0f3-4eed-9707-b517f4923781
Certificate serial:       010D0C9F4328584598FE00374C58012F79A60C00
Authority key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     16428
IP address blocks:        162.254.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:00:37:4c:58:01:2f:79:a6:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2044bf03-a0f3-4eed-9707-b517f4923781
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=cd8634e7-5dba-46e7-b29e-e6712d3c3bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:03:ff:31:56:14:14:b7:0f:80:01:b3:bd:
                    f2:0b:27:c1:8c:88:01:ab:44:d6:0f:f0:a7:88:16:
                    68:b1:22:ed:ef:46:64:a1:47:5c:36:25:c6:06:94:
                    2c:39:39:ba:88:43:dc:fb:09:61:fd:59:7c:92:61:
                    d8:88:75:a3:dd:aa:5d:3c:39:34:98:45:ce:c2:c7:
                    af:d1:12:6f:c4:46:6c:ac:d3:19:17:29:37:b8:22:
                    af:eb:82:a8:41:d4:bd:5b:77:6e:cd:09:c3:28:9f:
                    1a:4a:4f:be:74:5c:ed:52:40:ae:64:fe:ab:41:10:
                    c3:94:3b:21:32:6c:6d:ca:9b:6a:90:24:83:8f:90:
                    bf:ef:ea:50:83:b7:39:04:1f:93:41:b3:4b:e8:59:
                    ad:5c:71:b1:70:1e:b4:bc:e7:88:20:b5:39:a6:3a:
                    67:77:b8:98:fb:09:a8:16:2c:d6:11:fe:1f:e5:0d:
                    35:f7:2f:3a:84:14:45:0a:5a:a9:29:b5:94:0a:62:
                    65:94:69:94:0b:43:fe:15:e6:14:7e:bf:6a:48:76:
                    77:d4:b2:58:46:6c:56:d6:fb:7e:75:5c:ce:ef:5c:
                    3f:64:8a:d6:cc:2c:2f:6c:1d:32:7d:1f:7b:e4:85:
                    80:18:0b:94:e5:d7:1e:f7:36:aa:e9:d3:62:13:5d:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:5F:15:A1:71:11:32:7D:F0:3F:C2:F8:21:2A:97:83:E2:DA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl

            X509v3 Authority Key Identifier:
                keyid:63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:38:50:01:24:77:1b:bc:ee:b1:cb:72:75:1a:9b:08:17:
         0b:f0:4b:4c:66:95:15:21:1f:4f:c9:d3:fc:57:8c:84:9b:e5:
         ec:ea:27:ee:63:37:ae:69:ae:7b:e4:c9:11:c8:2d:27:4c:f9:
         fb:9a:7b:4a:04:14:b3:86:97:12:47:34:f6:c6:18:43:e2:a1:
         73:61:92:9d:8c:a7:82:d2:a7:14:c2:23:ee:82:30:5e:95:dd:
         6f:a1:c3:89:69:dc:7f:aa:9a:5b:15:fd:f8:74:a0:bb:4c:96:
         68:ff:57:48:8c:d1:e9:bd:62:03:a4:34:9d:89:f6:0e:ad:2c:
         32:42:aa:e0:0a:c4:8f:c3:bb:95:c0:4d:0d:81:a1:7f:c4:a6:
         74:cd:e3:36:dc:b6:97:37:08:fe:75:f5:da:f5:fa:1e:78:a4:
         04:54:82:e3:9e:62:40:60:aa:e1:e7:93:be:3b:28:e3:2b:78:
         7e:e2:25:63:fd:ad:50:06:01:8b:4f:f3:c4:c7:22:2f:a4:ba:
         7d:0d:ef:4f:02:04:a9:96:e0:05:88:fe:8a:6d:ab:8b:15:bc:
         9c:c8:66:a6:a4:47:33:cb:7e:c4:26:d6:48:1e:31:01:51:57:
         65:9a:84:74:58:c5:e9:f2:a6:2e:61:b0:f0:c7:97:ba:0c:d4:
         c1:6d:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----