Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
File:                     643d361b-c7bb-38de-aa52-f1c332bae5b9.roa (raw, json)
Hash identifier:          Qlrdd77+PVzIJ8blqbDlnHfqhMl88REL7r36Eh/aaf8=
Subject key identifier:   C5:75:53:7C:E7:51:B7:A7:26:D1:48:0F:DA:C4:A4:A6:00:39:10:12
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285845ECBE82B73C73274E82A88180
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     109
IP address blocks:        198.135.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:82:b7:3c:73:27:4e:82:a8:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=cecb112b-6463-42e4-97d1-86bd3a4a2ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:27:19:05:4a:0e:b4:45:bf:90:4b:a7:11:
                    8a:c9:93:22:fe:26:63:bb:f4:60:67:b9:21:76:fb:
                    16:2f:e3:93:db:36:38:28:2b:1b:64:fa:52:a8:ea:
                    5b:b4:6c:23:81:f8:e8:48:c4:9d:08:9a:52:1b:28:
                    cf:3b:31:ed:6e:8b:77:07:8e:6e:9e:b2:37:4f:d3:
                    f5:4e:34:a8:58:15:e5:0e:90:ba:61:66:8b:38:6d:
                    bb:4d:eb:13:e2:29:f0:60:5d:02:7b:44:dc:12:af:
                    89:97:95:93:3c:0e:ec:7d:b2:21:e0:fa:08:34:71:
                    ca:2f:d2:17:34:f1:c3:0a:fc:24:f4:87:fb:a7:14:
                    55:59:e9:7f:45:88:34:16:a2:7e:1c:be:1c:a2:be:
                    3d:41:42:3f:29:1a:8a:df:de:4e:ee:cd:c2:ff:58:
                    22:93:9b:b2:74:e1:69:88:e5:c2:f2:73:9a:50:94:
                    6c:35:54:b8:89:6c:9b:93:8a:92:57:42:4d:cd:a0:
                    d4:ee:e8:45:cf:61:96:d5:24:4c:ce:d6:dc:3a:8f:
                    0b:cf:9d:ee:de:51:d8:dd:de:c6:f8:61:3b:fd:40:
                    ba:a5:5f:73:4e:b5:b0:91:c6:1b:da:b0:9b:f6:d2:
                    d8:50:18:9a:70:34:4e:3e:9b:40:1b:2d:3b:4b:fa:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:53:7C:E7:51:B7:A7:26:D1:48:0F:DA:C4:A4:A6:00:39:10:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:2a:79:41:70:33:9f:aa:2a:15:68:3f:d0:13:38:2c:60:
         a7:d7:11:a2:97:f4:a8:13:c1:02:8c:f2:66:6e:69:e2:08:5c:
         6d:60:9e:0f:20:4d:3d:b7:c3:0d:fd:c0:07:61:6c:a2:c0:99:
         80:2f:ce:65:36:73:01:1b:a1:56:e4:60:94:0e:a2:e2:5c:a5:
         2f:30:62:34:fe:53:63:7a:9c:60:56:7f:ff:cb:49:59:b4:61:
         a7:4c:2d:3b:7b:8a:f4:72:13:58:b3:ad:e0:74:fa:80:7d:38:
         4a:de:eb:8b:db:4c:98:a5:f3:c4:66:2b:fe:b1:b1:17:a3:f3:
         4e:a0:7b:67:70:25:b2:f8:45:08:59:94:9f:ff:cd:52:ef:90:
         7d:8b:f9:ac:2f:6e:6a:2a:94:7a:32:78:ee:80:74:ff:7f:81:
         ff:99:9c:d7:61:44:d2:84:e7:8a:78:07:bf:34:f0:20:d0:ec:
         c6:65:ff:4e:9f:ce:72:ea:9d:5e:0a:b9:4a:ee:bc:6e:38:08:
         e6:24:49:27:d5:78:f0:96:ab:b3:e5:30:47:64:3f:77:45:fc:
         07:66:e1:09:b0:de:48:30:22:f2:71:75:74:6f:66:ca:3f:da:
         9c:75:6d:4d:24:22:f8:d5:9d:0b:3e:4b:aa:1e:3f:42:57:7d:
         99:66:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:28 2024 by rpki-client on console-ams.rpki-client.org