Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
File:                     e293fb23-fe2f-324d-8419-24162f79f58e.roa (raw, json)
Hash identifier:          gTxYX6YOq/Fyy1UlIJSNSkPu8u8kY4RtlYrpCBAyGMM=
Subject key identifier:   F3:CE:4F:15:EB:3B:2B:04:9D:88:54:5E:1C:91:53:11:24:A5:DE:C3
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F43285845347D4C52885044159A5F0170
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        162.252.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4c:52:88:50:44:15:9a:5f:01:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=0048eaa6-a2fe-4287-830d-e9482aa6813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:25:bf:4d:6f:96:58:00:31:b7:e3:c2:f5:
                    8b:7c:ca:d1:c3:cc:f6:e3:f0:02:a1:97:01:ce:76:
                    ac:94:51:22:73:5b:67:66:ac:38:1d:cc:1d:a1:91:
                    a2:da:1a:97:1e:44:ca:95:a8:e7:22:08:45:df:9a:
                    0b:59:87:79:62:65:2f:f4:b7:9b:9d:13:9b:93:e2:
                    f5:cb:69:78:1d:1f:6b:49:98:18:12:4e:e7:d8:83:
                    3d:d5:c2:52:e8:3f:87:f2:ca:70:f0:26:61:70:da:
                    ae:8c:f7:8a:8f:2c:79:73:e7:45:3d:f3:e5:5e:0d:
                    39:1c:38:1d:d9:53:d9:08:a4:9d:6c:cd:f2:39:8a:
                    a5:cf:7e:f8:7d:61:ee:bd:bb:9c:78:a9:27:ce:75:
                    f1:9e:60:71:ed:43:45:ca:f4:cb:72:d0:6a:ed:e5:
                    40:13:03:cb:dc:62:93:dc:b6:ae:b8:62:ec:ca:49:
                    9a:aa:8a:08:2b:71:13:55:84:e4:28:24:43:88:91:
                    06:58:2d:8b:42:8f:c7:3f:18:8d:68:84:82:89:bf:
                    8b:01:86:ed:bd:5f:b6:f4:b7:38:30:61:87:45:51:
                    2c:ef:d5:e4:a8:e5:d4:90:da:73:52:cd:cc:18:6d:
                    c8:cf:de:f4:62:f5:5e:4a:11:c0:f6:76:ca:66:1a:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:4F:15:EB:3B:2B:04:9D:88:54:5E:1C:91:53:11:24:A5:DE:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:f4:e1:72:72:4c:09:6f:55:ba:a7:48:50:83:25:cc:b7:
         60:9a:d8:66:97:08:9e:63:0a:de:64:85:02:96:2d:f4:27:cc:
         a3:44:09:9a:63:cc:da:99:71:ac:00:a0:f8:71:da:81:d3:f2:
         f4:67:c4:e4:23:85:a6:71:3c:94:01:b6:4c:7c:56:5b:ff:76:
         36:cc:8b:35:29:18:bd:dd:6c:3f:22:3a:83:38:3a:02:ef:67:
         eb:fa:bb:6a:f7:3e:5d:c6:20:e9:ca:f1:a6:7c:28:41:b5:e5:
         cd:cc:ab:6d:97:b5:cd:59:d7:63:44:9a:e3:8f:95:73:8f:8e:
         0b:6d:07:bb:43:2c:cc:8e:49:af:c0:37:ca:49:53:1b:ab:07:
         6f:3f:75:1d:31:5b:bb:87:ea:5d:8d:26:f5:22:09:5c:ea:5f:
         5c:c1:5a:b2:d9:1e:32:7d:ab:7c:34:4b:67:f9:9f:f1:b3:76:
         f6:6e:34:29:52:b0:de:30:35:a8:71:4d:d4:c6:d4:36:51:83:
         97:e1:f5:ea:8e:5a:c0:43:23:48:d2:de:b6:bb:b5:bf:8f:3c:
         eb:a4:fe:5c:c8:03:dd:93:68:59:68:2b:d5:aa:a2:07:af:ad:
         58:d4:bc:3d:45:58:1f:01:47:25:59:e6:1a:ac:23:37:f4:e1:
         07:68:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:54 2024 by rpki-client on console-fra.rpki-client.org