Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
File:                     0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa (raw, json)
Hash identifier:          TNxZRwH3Dd11oM5txJeunyHzCaDUP7V7UFKYcbyGvn0=
Subject key identifier:   64:5D:1C:DA:09:AC:64:5E:65:58:4F:3C:63:4E:49:F9:DA:37:BC:FE
Certificate issuer:       /CN=4ed81831-d382-493b-b622-f4fb0157e101
Certificate serial:       010D0C9F43285845CE090B8C617967D098235200
Authority key identifier: 2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     53871
IP address blocks:        199.188.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0b:8c:61:79:67:d0:98:23:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed81831-d382-493b-b622-f4fb0157e101
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=f14f92bc-7c33-4c1e-9e45-aa133eaf16ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:91:fa:ff:54:32:40:80:91:13:a4:3f:3f:
                    2d:ba:7e:eb:6b:fd:05:d1:de:08:cb:f2:f9:be:c9:
                    b5:1c:cd:3a:40:75:e9:61:a6:56:21:64:05:3f:1f:
                    b5:cb:d5:09:cb:a7:9f:72:eb:00:e6:c6:57:e5:9c:
                    52:1a:65:fb:ab:9b:63:89:35:93:fa:3e:93:51:a7:
                    73:c6:52:92:2c:31:27:20:be:ab:dd:fe:e4:63:40:
                    6f:db:f6:68:0b:ce:c2:73:6d:bd:29:bf:e7:6e:22:
                    0f:a2:a8:c0:06:ae:e0:e2:db:52:42:ec:86:ad:a7:
                    1c:e7:96:d0:04:03:89:0d:15:3a:69:51:69:b8:9e:
                    6c:0c:df:1f:5e:24:5b:0f:95:86:ca:5a:d7:54:99:
                    ae:aa:6d:37:c7:0f:88:b6:c0:1b:7c:5e:e5:2c:1b:
                    e6:35:04:35:7d:ec:97:ad:b2:bf:dc:f4:0b:3e:99:
                    15:2a:de:b7:c5:fd:64:09:80:e5:98:40:c2:17:1a:
                    1c:50:9a:08:55:9b:b9:91:66:35:ff:b8:0b:44:cc:
                    ff:0c:cb:13:80:ba:a8:97:1a:06:c7:28:cd:21:a8:
                    02:96:9e:97:79:b9:f6:1d:49:48:c7:31:a8:81:bc:
                    ea:50:14:c1:11:0b:64:bf:e6:9a:b4:b2:47:53:75:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:1C:DA:09:AC:64:5E:65:58:4F:3C:63:4E:49:F9:DA:37:BC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl

            X509v3 Authority Key Identifier:
                keyid:2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:88:7f:58:49:67:99:cd:3d:b0:43:67:91:67:e3:e3:69:23:
         b9:bc:84:c3:79:95:50:5b:76:15:1b:32:03:8b:2e:60:f2:24:
         13:d8:8e:e5:3e:0c:5b:30:09:c0:95:60:4c:90:a9:d7:eb:ea:
         35:26:86:9e:28:24:73:56:c1:a8:f4:2a:a2:00:bd:79:e8:ee:
         1f:f9:ba:bf:b2:24:d1:ac:92:5d:54:c6:df:67:8f:37:c5:e0:
         d2:4d:d2:09:07:66:43:4f:5d:50:8f:cd:43:a8:6b:9c:c6:7e:
         27:aa:6f:ad:48:2a:5f:be:e4:74:0e:67:bc:54:43:c6:39:6f:
         61:1f:55:72:2f:93:44:e1:fc:93:99:6a:2f:58:f5:a2:e1:3f:
         92:27:cd:0d:8d:7c:d5:82:c9:14:fe:fe:3e:2b:34:3f:50:7b:
         4a:ec:b5:83:de:0a:65:4d:c3:5c:fd:9b:fd:fe:ed:c0:f6:e1:
         b7:d3:8b:70:87:24:02:cf:73:04:ce:69:ab:8d:93:4e:94:3a:
         31:c7:7e:89:2e:1d:5a:3b:fd:54:8b:ed:28:ba:65:80:9b:24:
         0a:1c:d3:9a:7e:3f:f3:e9:6b:51:b7:de:8c:b9:8a:77:7e:45:
         d7:5e:8e:d1:54:02:0c:2b:03:36:2f:78:85:28:a4:84:0c:05:
         11:51:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:21:33 2024 by rpki-client on console-fra.rpki-client.org