Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa
File:                     1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa (raw, json)
Hash identifier:          q8n6fqeYHH0ZN7+xvsGDsApRLSmyezfAiclJ6g7BjUs=
Subject key identifier:   A3:DF:22:A0:A6:76:45:88:FC:1A:B6:F3:71:DF:7A:05:98:61:1F:CA
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285845734DB948671B763857701300
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     46238
IP address blocks:        199.71.228.0/24 maxlen: 24
                          199.71.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b9:48:67:1b:76:38:57:70:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=62bb56b1-e816-4491-9017-323b8f1bd81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:72:8a:32:2a:5d:6a:70:22:55:ef:bb:85:
                    96:c4:a9:93:f6:6c:f8:14:c1:5d:76:1a:97:bf:6c:
                    21:54:2f:d4:0b:3e:3d:69:d6:ee:6b:d2:df:51:a7:
                    04:d7:1a:0b:f1:02:94:9d:7a:66:59:fe:f6:f8:aa:
                    34:70:f2:d9:a3:41:f2:ae:ba:32:39:06:c5:55:8a:
                    7d:30:e2:d0:93:c2:c8:cd:57:00:86:e4:bc:e6:c9:
                    2d:1d:d3:8d:a2:67:ee:21:44:56:9f:83:84:bc:0b:
                    b3:b6:7d:13:75:94:a4:8d:d7:9e:d2:c4:7e:a5:3f:
                    f1:0c:31:4e:66:1c:ab:9d:86:6c:f4:85:d5:12:27:
                    28:37:a2:92:91:e2:b5:79:ed:fb:5a:8a:0c:fc:c5:
                    c0:bb:25:4a:ab:6b:7b:a6:c1:19:4d:3d:51:ea:a5:
                    d5:c7:bb:09:ae:80:e9:e9:5a:4d:b6:e1:02:bf:09:
                    d5:15:d1:39:8d:07:f0:84:48:32:07:42:44:af:6d:
                    92:52:39:4c:8e:87:3e:73:60:a7:0a:12:7c:13:bf:
                    20:a4:b4:91:7f:bd:9c:6d:98:6b:f4:e5:db:92:e7:
                    c3:41:1d:40:81:f8:6a:c5:0b:62:59:92:fb:7f:59:
                    5f:cf:98:0a:04:21:d5:82:5b:29:d0:c5:4d:27:98:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:22:A0:A6:76:45:88:FC:1A:B6:F3:71:DF:7A:05:98:61:1F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:09:b4:d8:f7:5d:08:be:5e:d2:64:f4:9d:62:94:79:ca:af:
         3d:db:fc:a0:bb:f8:ca:61:f2:59:22:34:28:cf:ff:a2:d0:84:
         ee:61:b8:01:0d:5d:f4:b3:e8:58:98:12:58:53:0f:aa:5e:6c:
         39:10:73:55:c3:5c:67:6f:f2:8e:fe:40:42:e7:11:3b:3c:d2:
         b2:03:03:bc:9e:19:35:69:18:db:42:14:ad:9e:2b:e6:69:59:
         56:92:32:d6:d8:85:21:a9:f3:5e:92:df:cb:bc:bd:a5:da:60:
         72:7d:99:cc:bf:8d:48:9f:93:77:20:d2:8d:85:1f:99:d0:33:
         a7:5a:85:6e:1e:4a:f5:bb:23:b4:9f:7b:1a:43:cb:b8:3e:3e:
         ea:3d:11:96:4c:9f:74:91:c3:21:93:eb:8f:82:ee:a2:41:a2:
         15:c5:81:b2:f0:d6:c9:d5:dd:a0:b9:39:d3:68:78:7b:81:c6:
         05:1d:56:3e:69:af:41:09:29:db:93:bd:e6:19:9c:14:da:63:
         38:fd:92:bf:e3:79:a2:29:7d:98:75:a0:5a:c6:06:a4:2b:f2:
         93:90:c2:4f:78:1a:1f:b2:ea:8d:6a:0c:a2:61:01:68:96:43:
         d1:94:a7:26:d5:eb:c9:ac:09:0c:f2:bc:70:dc:e2:5f:e0:1d:
         6f:11:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:30 2024 by rpki-client on console-ams.rpki-client.org