Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa
File:                     d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa (raw, json)
Hash identifier:          CDZl+t/LMwZYcSYHCXv4sjY2/dG4qrJp1lNtUvDbKPo=
Subject key identifier:   15:0B:72:95:D4:A9:9B:98:0E:7D:54:08:9B:D5:56:3B:7E:24:B6:B9
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584543D80060D11B3DD79DA5C180
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     31898
IP address blocks:        192.243.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d8:00:60:d1:1b:3d:d7:9d:a5:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=5be97393-9545-4328-a554-4375c9667e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:83:50:e2:af:5e:0c:41:e2:57:42:45:f6:
                    12:7d:84:6f:37:29:ac:67:55:29:54:40:38:77:a2:
                    fd:71:9c:b0:b1:ba:9d:e4:5a:08:a1:95:35:7a:5e:
                    ef:08:0e:e0:32:e8:58:95:0d:dd:8a:db:31:48:02:
                    0f:0b:f0:17:68:0f:1a:fc:0a:12:ac:d7:2b:cd:8f:
                    4c:a8:bb:d1:e2:9c:8c:60:b0:b8:aa:27:32:ae:4b:
                    57:ab:f9:9f:f4:94:c6:e5:00:93:51:2c:eb:0b:51:
                    8e:05:bc:d2:72:f6:c2:77:fe:47:3f:21:57:8c:ce:
                    53:3a:58:ff:5c:6b:80:4d:f4:79:eb:cc:07:2d:4a:
                    88:eb:bb:1b:38:3e:a7:52:2e:8d:be:d4:38:cd:ec:
                    2b:34:d1:f6:25:fb:f4:d1:c1:89:ef:e6:24:b3:97:
                    11:39:4a:57:17:27:86:c9:e0:bb:56:86:19:1c:06:
                    ee:d8:de:b4:89:e2:a9:40:80:ac:39:65:5d:43:03:
                    fe:3e:2d:6e:c0:1f:c8:f4:4b:42:54:29:ad:55:ad:
                    dd:c4:b3:19:42:c6:e3:bf:d6:c5:ed:76:99:b9:17:
                    a9:28:f8:6b:21:95:3b:78:98:7c:6e:cc:66:67:db:
                    8c:e4:83:f9:07:bd:43:65:5d:6f:60:d0:f7:81:b8:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:72:95:D4:A9:9B:98:0E:7D:54:08:9B:D5:56:3B:7E:24:B6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/d12d7bae-b777-3fa1-a90f-0b2e7dc6f217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:5e:72:20:07:8e:84:c2:3b:27:9c:c7:c5:07:90:8a:bf:
         ee:2d:93:a3:ae:13:22:f0:06:89:3e:79:b8:b1:d2:c6:cd:ad:
         09:53:80:d3:0b:33:2a:a3:1f:5b:6c:99:03:7c:40:e9:c6:1f:
         f0:f0:fb:da:0b:61:6c:3d:56:ae:25:9b:1a:17:91:99:e6:b9:
         70:c5:b3:58:06:c3:5b:51:d0:72:f5:9a:32:33:d4:82:01:d4:
         76:30:d2:cf:51:ca:7c:97:e1:51:0d:f2:ab:2b:f0:82:0a:9d:
         d7:34:8a:b2:5e:0f:70:42:c6:e9:fa:98:ad:dd:08:23:3b:c1:
         69:b7:20:fb:ca:ec:8f:34:5c:19:86:04:db:cc:a0:e4:b3:41:
         fd:1f:f6:c3:0d:31:17:a1:f7:8a:74:9c:19:bf:14:0e:fa:52:
         bf:de:1a:f6:25:cc:b4:5e:ef:5c:da:75:20:6d:34:fc:52:05:
         4c:00:0f:45:fd:3f:65:87:21:41:39:9e:97:c9:2a:f8:77:74:
         a7:7e:60:66:30:f8:b8:dc:24:13:84:3c:bd:cc:a5:87:82:43:
         27:a5:df:60:15:ab:29:c5:98:02:aa:24:a7:3c:2a:e6:fb:9c:
         c3:f6:b7:66:8e:00:7c:ef:6d:93:2d:cc:b3:74:d4:a8:6b:ab:
         60:4f:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:34 2024 by rpki-client on console-fra.rpki-client.org