Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa
File:                     4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa (raw, json)
Hash identifier:          pIV5vYBy942hRdNoQbwsFQpK4heYC/HTQOHOfIPToDM=
Subject key identifier:   2E:92:6C:1B:2F:4A:B3:3E:59:82:EA:6E:39:5A:90:C3:99:2B:F7:B7
Certificate issuer:       /CN=24b82191-9eab-4780-afd2-8d7640123b59
Certificate serial:       010D0C9F432858453A12ADFAD4E701D7EDDA3400
Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     63303
IP address blocks:        172.83.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ad:fa:d4:e7:01:d7:ed:da:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=62f9c9f4-984b-4cec-89ff-2781a36471dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:de:ca:bf:63:60:c6:fa:d5:c0:3d:15:89:
                    61:dd:6d:1a:10:3d:be:b6:88:28:1c:d2:45:e6:72:
                    59:3b:88:d3:c4:69:c4:f3:b0:00:10:11:44:d1:9f:
                    19:e3:66:53:5a:a4:5c:8f:09:b1:48:18:a4:51:55:
                    01:be:9b:f0:98:0b:9e:1b:95:b1:f7:3b:a4:37:8a:
                    76:77:67:1b:1c:a4:1f:ef:f6:70:9b:6c:83:41:e0:
                    f4:b1:24:5e:09:67:77:b4:5e:93:bb:85:eb:12:43:
                    86:a1:40:fd:11:42:a6:74:68:8e:0b:25:c5:44:92:
                    c7:53:bf:55:b6:5c:27:af:c4:f3:aa:f4:26:6b:19:
                    5d:64:a4:9f:52:61:8a:01:08:ac:38:b2:18:7b:62:
                    fd:88:cd:68:ef:23:32:bd:22:b5:2c:d7:c8:88:0b:
                    20:04:a7:d9:7a:ac:9b:0f:53:2d:5d:dd:a6:40:b6:
                    97:12:7f:7c:a7:1e:a1:36:fd:63:a5:5a:f8:df:c8:
                    2e:ef:b2:ec:68:21:cf:a6:43:89:06:b1:77:b2:ba:
                    1a:0e:50:14:17:d7:aa:25:1b:c1:ce:af:c8:57:52:
                    b8:2c:18:38:a4:84:c5:7e:1b:f6:cb:a7:41:c1:92:
                    08:0d:4a:ad:59:e5:2a:c8:61:81:08:69:c5:e3:cc:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:6C:1B:2F:4A:B3:3E:59:82:EA:6E:39:5A:90:C3:99:2B:F7:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0c:4a:bd:4a:89:68:2a:45:19:72:49:ea:1a:8b:91:ca:4c:
         d7:2e:a4:17:5b:07:05:c7:94:a1:ae:88:57:c5:a5:cc:9b:2c:
         ce:96:6a:a8:8b:8e:a3:10:30:e6:34:01:ad:1b:29:c3:cb:5f:
         e1:48:65:5a:20:f2:06:4a:38:e4:9c:10:9a:4b:e2:ef:47:71:
         cd:f8:f1:07:39:1b:88:91:9f:ce:13:5c:9d:0c:82:28:c5:7b:
         4e:ec:20:61:6f:e2:dc:fe:2d:6a:01:a6:75:ec:30:d4:8e:10:
         bd:0f:39:8a:89:0c:78:70:2f:6c:df:a5:ef:01:b2:00:6b:99:
         70:90:9d:b3:84:30:c6:7e:14:46:b2:78:d9:45:65:9a:de:c6:
         76:05:d5:4d:cc:a2:16:67:09:e3:e3:76:bd:fa:87:f8:64:af:
         2f:7a:e4:b4:77:0f:4b:4e:a3:cf:47:7e:d5:80:3f:28:f6:bd:
         e7:46:6e:3d:e5:e0:c7:d7:ce:c7:dd:68:5f:58:9e:b9:8f:41:
         e7:52:57:f0:dc:0f:93:02:10:e9:b4:a6:59:e7:3b:c9:be:51:
         17:fd:4d:f0:69:ac:a7:91:a8:0c:93:5d:bc:ea:66:d0:2e:f2:
         e8:ea:40:18:cc:a7:2d:5f:4f:af:1a:aa:aa:06:a0:d5:85:49:
         66:ce:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:11:41 2024 by rpki-client on console-fra.rpki-client.org