Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/2e6149bc-bdfd-3160-8ee3-bc019fafd9a8.roa
File:                     2e6149bc-bdfd-3160-8ee3-bc019fafd9a8.roa (raw, json)
Hash identifier:          CMLIvj14HVGCE7EdWHiHLSecOQ+Qrd7U72kLiGHOVYY=
Subject key identifier:   31:5E:F5:EC:0B:2A:4B:B7:60:88:BD:1E:B9:CF:C8:81:67:41:03:85
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858455340E1C4CE071F40558E8A30
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/2e6149bc-bdfd-3160-8ee3-bc019fafd9a8.roa
Signing time:             Mon 25 Mar 2024 13:28:54 +0000
ROA not before:           Mon 25 Mar 2024 13:28:54 +0000
ROA not after:            Sun 23 Jun 2024 13:28:54 +0000
asID:                     36519
IP address blocks:        192.135.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:40:e1:c4:ce:07:1f:40:55:8e:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 25 13:28:54 2024 GMT
            Not After : Jun 23 13:28:54 2024 GMT
        Subject: CN=2ba82e27-d2d5-42c4-89cd-473cb9d144ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:a7:30:c9:86:9c:43:b1:4f:2f:6d:2a:d1:
                    1a:b8:a6:ea:48:a0:2b:92:27:9c:2e:6b:7f:25:eb:
                    84:20:8a:86:24:53:da:42:eb:78:4e:ce:c4:14:dc:
                    a7:e0:42:4f:64:9b:45:6b:10:a9:10:a3:e9:db:ca:
                    ed:7e:f6:fd:95:0d:6f:cc:87:e4:36:ae:c7:33:2c:
                    f6:81:13:84:a8:44:21:00:e6:5a:25:50:cd:50:cb:
                    9e:42:97:6c:83:19:3f:4e:f0:71:76:bd:62:d3:dc:
                    5b:87:a2:2b:50:c7:15:77:9a:a9:fe:fa:8c:cc:fc:
                    3e:7e:de:c8:64:a9:70:19:28:ff:1b:79:c9:e7:d0:
                    9c:07:e1:cb:25:92:3b:43:76:bc:5a:22:61:4f:4c:
                    d6:f3:91:2f:89:1c:7f:08:5e:24:b5:82:5d:37:f3:
                    c8:b9:90:79:a2:ff:74:f2:0f:50:f7:61:d2:4a:84:
                    73:b1:dc:b8:fb:74:a9:76:c6:74:dc:09:b1:1f:6e:
                    18:b2:ea:6f:f4:9b:1a:f8:df:70:b9:43:2b:b9:ac:
                    26:18:0b:bf:12:e4:dd:38:cb:c4:89:3e:95:85:34:
                    96:dd:14:90:da:8a:66:ba:30:ae:96:9c:fb:9c:58:
                    11:6f:9e:72:04:28:95:c1:85:50:30:99:2e:92:ef:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:F5:EC:0B:2A:4B:B7:60:88:BD:1E:B9:CF:C8:81:67:41:03:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/2e6149bc-bdfd-3160-8ee3-bc019fafd9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:a4:e7:e7:fd:7a:a6:5d:3c:f0:4a:dd:3f:3a:68:e9:bd:
         15:38:04:e5:f3:22:0e:f8:23:5a:19:d0:b9:d7:57:04:f2:02:
         42:96:e8:61:da:4a:e9:5c:3d:bc:7c:00:9f:00:61:da:7d:81:
         8a:47:6f:e3:3c:49:1f:ae:8f:2e:2f:1e:a0:22:be:27:f9:de:
         56:3c:02:a5:5c:bf:93:68:92:02:2f:1d:5f:ea:7d:0b:78:f1:
         d7:33:96:0a:00:dd:eb:f9:08:2d:82:7b:da:fe:c8:c4:eb:6f:
         ad:f7:44:32:45:bc:ec:a8:4c:f3:24:b7:28:dd:94:d9:db:f1:
         c1:58:77:a3:d0:b2:a0:66:a2:eb:9b:1d:48:32:d6:2f:17:76:
         a7:61:a9:0a:7b:c9:b6:40:26:0e:87:83:84:b1:9e:6e:24:2b:
         20:1a:d1:68:83:ca:38:99:9e:46:b6:15:45:ec:f7:4f:dd:a9:
         26:80:e4:11:4e:32:a9:29:30:eb:ba:f2:d2:12:94:eb:1d:5a:
         6f:53:af:bc:16:13:e0:62:6d:42:e3:02:00:28:d1:7e:b2:c9:
         6b:ea:18:8d:1d:49:16:61:0f:45:eb:49:bf:5a:2b:86:3f:c8:
         1a:58:70:98:c0:8d:5f:ba:85:08:52:36:b8:c9:d5:66:fb:bd:
         d0:f4:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 13:06:50 2024 by rpki-client on console-ams.rpki-client.org