Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
File:                     9150111f-8e0d-3fbe-b669-7e5d4f757864.roa (raw, json)
Hash identifier:          9yKULVjtdfyzBJD35MJQaMHpZo58H2oc69Vj2+rnTy4=
Subject key identifier:   A6:A9:FA:61:25:05:CF:8A:A2:CE:FA:1F:A1:02:DA:DA:D6:2A:46:22
Certificate issuer:       /CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
Certificate serial:       010D0C9F43285845E88E6E170D8628690F6327A0
Authority key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     397140
IP address blocks:        198.8.74.0/24 maxlen: 24
                          64.32.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:6e:17:0d:86:28:69:0f:63:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=bbe3e148-29a7-4e52-b066-edbdc5c6bdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:e0:d1:06:5c:6a:96:9c:1f:92:01:1a:1e:
                    04:7b:1d:78:d5:0f:78:58:72:ca:ba:ec:bf:42:a9:
                    45:c3:32:3e:45:92:f1:66:69:b0:9a:bc:79:61:ad:
                    1b:f1:a7:5a:35:92:17:86:ee:ff:f6:a6:99:ab:c4:
                    93:64:8b:46:f7:2c:5d:d4:8a:94:31:bb:91:0b:33:
                    74:60:61:41:79:61:95:32:d3:cc:b2:45:b2:b4:45:
                    0e:8a:d1:97:e7:e4:10:bb:f6:f7:ff:b3:a7:f4:6d:
                    df:ab:1c:b5:99:bb:d3:b4:5f:6e:0e:1d:4d:d8:13:
                    20:ce:d6:86:c3:3d:e7:13:5e:1a:e1:be:83:7b:2b:
                    94:43:46:5a:b0:cc:4b:f3:0d:ba:53:35:7a:64:e3:
                    8f:f0:83:af:0b:dd:2f:ec:44:c3:4e:a9:5c:63:14:
                    80:e7:b9:c3:2f:f8:da:ab:c2:f6:df:3e:21:30:11:
                    cb:23:0f:17:9d:a5:4f:89:6c:8b:12:73:a3:0e:54:
                    b8:58:ab:39:9a:bf:ea:76:40:10:ba:40:b1:0e:c7:
                    5f:12:62:b5:92:e8:f4:38:b8:82:8d:2a:90:c1:70:
                    f2:3e:99:84:2d:23:1f:d2:4d:fb:79:c3:81:07:46:
                    05:ec:ac:8e:4b:b6:b9:18:53:20:1b:b4:c5:ee:c0:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:FA:61:25:05:CF:8A:A2:CE:FA:1F:A1:02:DA:DA:D6:2A:46:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.43.0/24
                  198.8.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:63:9a:3d:a3:f1:f1:ef:a8:18:aa:17:8d:60:d2:3c:60:91:
         50:5d:db:11:53:cd:66:14:4e:68:f9:d3:5c:af:17:66:e6:9e:
         c5:ba:80:01:e9:bc:ba:a4:38:85:62:4b:a5:f4:14:71:96:89:
         e6:55:74:10:96:b4:f9:89:03:db:cc:bf:b1:00:24:1b:8d:1b:
         ba:c6:e6:68:40:05:bc:b0:e9:13:e4:6d:23:98:0d:fd:fd:02:
         e7:23:cc:99:6b:46:21:01:0d:56:24:30:79:c9:86:29:cd:d2:
         0a:fa:68:90:a8:d0:2f:24:c4:08:87:b4:da:45:9b:87:74:4b:
         3d:d9:08:e0:5d:d0:c9:ad:66:a1:57:d1:50:1c:87:18:2f:82:
         83:05:ca:11:35:e5:36:9d:09:db:b8:e2:41:97:81:e9:06:22:
         d2:3a:ed:3d:cc:bf:02:a1:b9:1f:5a:cb:0e:1f:d2:55:a7:13:
         1a:ba:f4:b2:d5:f5:a5:39:7d:e9:11:61:fd:ae:6a:cf:dd:f6:
         a4:11:19:af:a3:a0:36:36:6f:38:9f:ed:c3:24:88:58:b3:49:
         e8:6d:e5:15:af:07:46:35:2b:88:d0:34:da:b3:1e:b7:8d:92:
         6a:16:00:38:d4:9f:37:ec:16:cf:67:5e:2b:bd:c0:75:01:d0:
         51:20:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org