Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa
File:                     5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa (raw, json)
Hash identifier:          +GPV+84g2GnlLaGPNQWxyUOQZff47N1gyYlROL4KFIs=
Subject key identifier:   14:11:C8:53:CB:CC:27:76:47:AB:5F:E2:5E:A5:45:73:3C:DF:C8:91
Certificate issuer:       /CN=9becea05-974b-43e4-a04f-198402715647
Certificate serial:       010D0C9F43285845CF6E3DBCD3A6D3D87C9A7100
Authority key identifier: CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     32080
IP address blocks:        165.140.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3d:bc:d3:a6:d3:d8:7c:9a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9becea05-974b-43e4-a04f-198402715647
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=a915d527-8482-49c2-a0e0-f67d521eecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:db:9d:ed:41:eb:e1:46:80:97:73:49:bb:
                    60:28:0b:24:18:1d:89:84:58:58:c6:e4:dd:7b:de:
                    0a:a2:11:ce:86:84:45:7d:07:4a:d4:12:9c:67:8c:
                    10:fe:c8:15:6e:1e:8c:17:74:62:26:27:55:f9:d3:
                    02:9a:48:c6:8a:e9:c3:06:34:2e:f5:22:d2:e6:fc:
                    1b:76:e3:79:98:19:1c:80:9e:ba:fb:0b:68:f2:e1:
                    df:d8:15:01:bc:da:2c:8c:22:cb:29:cb:3c:e5:ea:
                    f0:c6:bc:be:78:aa:1e:70:dc:47:3f:7a:52:be:9c:
                    c4:e8:8c:3c:b3:7c:9a:34:92:6c:f9:fc:25:f4:2e:
                    64:3b:a1:4b:d6:71:26:0f:c9:61:49:53:4a:bf:2c:
                    58:70:37:63:82:ad:fa:d5:be:b3:48:ac:b6:35:fd:
                    8d:48:a1:b6:92:52:76:ef:ca:34:39:97:5b:88:f6:
                    d0:3b:22:73:ac:ca:c1:13:ce:cd:03:3b:aa:bd:1b:
                    2a:dd:32:85:d1:19:0c:1c:50:34:5f:08:4a:29:b9:
                    f9:ab:1a:b8:40:22:b8:07:05:fb:79:34:ee:0b:ad:
                    c6:bf:77:e8:50:0d:9e:34:d5:d0:76:7e:e0:31:4a:
                    ea:93:6c:9d:25:74:bb:29:c8:c4:d9:71:10:b2:a6:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:C8:53:CB:CC:27:76:47:AB:5F:E2:5E:A5:45:73:3C:DF:C8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/5ca0e4e8-1450-303a-98c4-fe4b9575d573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl

            X509v3 Authority Key Identifier:
                keyid:CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ba:d8:ef:c5:7d:db:3a:ae:5a:a0:5e:3b:6c:71:d7:46:da:
         e8:46:7b:43:3f:ae:18:cf:ee:07:fa:5f:2d:c5:ad:cc:de:39:
         61:af:74:56:28:b2:c9:19:e8:25:8b:29:e3:06:bc:23:15:90:
         c5:d4:56:fb:a9:5f:ea:c6:6c:99:28:2b:b2:34:42:08:b8:3b:
         1c:6e:78:bd:f7:9b:8a:83:3c:1b:cb:1c:50:12:7a:88:2f:b1:
         58:d6:81:a2:97:77:2a:e1:be:68:31:ea:13:4e:83:5b:bf:d8:
         89:d9:43:a3:c7:ab:98:ad:c8:6e:21:59:67:bd:0d:22:88:c3:
         7d:91:64:9c:3d:55:6f:f4:10:9a:b6:8b:57:af:61:51:54:96:
         8c:69:c5:81:f4:2f:45:e4:2d:42:f3:fa:49:e4:d1:67:fe:46:
         5b:ec:12:90:c1:64:f8:48:24:a9:15:87:79:fd:cd:ea:c6:bd:
         73:e8:34:38:e4:17:c5:92:4b:c4:3a:8a:f2:10:2c:62:fa:f8:
         ef:b2:d1:23:f6:5d:ef:d1:e6:df:4a:c5:d1:ef:5b:d3:04:ef:
         65:44:a2:35:e7:d2:de:da:b0:12:34:38:03:13:ce:80:33:9c:
         39:85:7c:2e:7c:2e:ae:7e:28:80:d9:ca:c4:53:d7:4a:ce:5b:
         8d:26:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org