Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
File:                     5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa (raw, json)
Hash identifier:          eyuR5wJryJ+yN4VCraVk2gI1VL+etK9bVC0bpcD6FfA=
Subject key identifier:   77:D4:DE:39:0D:39:A8:E5:59:21:07:CF:C7:4A:F8:16:5E:86:D0:23
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584535E29D7ABB47974AB8D7AF00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        192.135.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9d:7a:bb:47:97:4a:b8:d7:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=c2178ee6-990e-4bba-b0b4-d3d1639d0728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:92:f0:cb:03:27:3f:9a:db:25:04:e6:c2:
                    ce:75:13:84:8a:3c:b3:53:77:73:d6:c2:da:91:9a:
                    3a:6b:b9:a1:d7:8f:f2:7d:b1:53:c4:a8:b1:9f:94:
                    a6:0a:8c:b9:44:df:b0:7a:01:f6:e1:1d:d9:e1:ce:
                    59:37:d1:1c:22:5b:7d:63:f9:84:dc:af:e1:75:b0:
                    a0:10:4d:2d:0e:e8:10:01:72:39:43:f1:d0:e4:bb:
                    4c:77:52:2d:ff:94:3a:af:51:59:17:22:1f:b6:82:
                    3f:ac:a3:a1:fd:a5:db:50:b2:66:07:77:6d:5e:65:
                    30:5a:94:26:3e:07:a9:ea:dc:5a:c0:5b:9f:27:74:
                    f4:2b:17:2c:0a:ce:cc:e1:11:d1:c1:7b:95:1f:5f:
                    1c:5a:97:69:f7:3c:56:6d:ae:e5:be:b1:0c:41:b7:
                    cf:df:8e:b9:d2:47:49:84:d0:08:2b:b1:3f:ef:fa:
                    09:e2:f4:11:eb:b6:7f:8a:26:26:01:aa:95:0c:b1:
                    c3:c2:3b:15:71:e1:5e:b3:9e:98:fb:e7:d7:12:fc:
                    d0:a5:82:b5:d3:c3:4b:2a:f9:e1:0d:6d:29:49:11:
                    6f:42:77:c3:a2:ee:2d:ce:16:e8:86:e0:c3:d7:72:
                    86:a7:93:02:72:78:83:8c:22:35:29:c7:ef:a4:0f:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:DE:39:0D:39:A8:E5:59:21:07:CF:C7:4A:F8:16:5E:86:D0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:8a:51:f9:b6:40:c1:f0:33:62:39:98:90:92:07:c6:11:
         7f:bf:a8:04:24:f4:0d:8e:99:a8:ec:d2:80:d8:d3:90:04:01:
         69:a8:e6:a3:51:e2:d7:24:a3:86:8e:00:17:94:3a:71:90:88:
         f7:d9:bf:9b:5c:9e:bd:ed:0a:e2:2a:be:e2:30:f1:af:a0:dc:
         e8:74:77:18:34:c6:3e:00:85:0c:69:b9:6b:e9:1a:12:89:b0:
         e9:f8:98:2e:c2:31:3f:fb:14:58:33:3a:22:5c:36:08:ba:38:
         20:5b:33:d5:be:c3:c2:a2:82:d8:f8:44:0b:81:56:6e:d1:6a:
         eb:d6:82:56:44:9f:ad:4d:74:cb:c6:d3:8d:a9:9e:e5:86:29:
         2c:51:e1:77:56:fd:e5:42:c4:9c:43:52:d7:39:60:1d:9f:c9:
         7a:5b:0b:98:96:69:d7:e7:bf:2e:44:cd:cd:ad:7f:1b:0e:bb:
         f7:3f:bc:c2:b3:53:bf:89:21:55:a6:18:a5:83:2b:65:d7:93:
         a9:00:83:9a:0d:1e:a5:22:98:dc:39:2a:8a:75:f1:da:ad:7f:
         90:99:2e:be:00:b2:e4:a8:d7:f6:b8:f8:b4:d2:c4:a3:dc:12:
         88:91:5d:d8:29:6b:23:b2:7f:88:2a:d8:f2:7e:bc:95:f8:eb:
         3c:5a:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:12:57 2024 by rpki-client on console-fra.rpki-client.org