Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa
File:                     b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa (raw, json)
Hash identifier:          rzf0WrIgFx6UtzgSioZ5XNO4Evd0PkRWbsLyV+/tAm0=
Subject key identifier:   41:D8:6D:A8:44:B9:5C:38:BD:C8:A9:37:9F:F8:32:F3:E7:4E:50:7E
Certificate issuer:       /CN=c0aed97d-7073-4206-b05c-18a84d3f256d
Certificate serial:       010D0C9F43285845C4437AB83054AB20CA81FC80
Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa
Signing time:             Sun 05 May 2024 01:00:25 +0000
ROA not before:           Sun 05 May 2024 01:00:25 +0000
ROA not after:            Sat 03 Aug 2024 01:00:25 +0000
asID:                     209242
IP address blocks:        199.34.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c4:43:7a:b8:30:54:ab:20:ca:81:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d
        Validity
            Not Before: May  5 01:00:25 2024 GMT
            Not After : Aug  3 01:00:25 2024 GMT
        Subject: CN=a0ef458b-3b1a-42cd-b911-7dcdcd55a84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:21:0d:92:2e:65:a8:fe:30:d0:34:f6:cd:
                    59:db:71:cb:a9:a2:18:02:46:39:c1:b2:02:69:90:
                    ca:84:bf:3e:f8:5e:e1:cd:26:ff:59:5e:c1:50:13:
                    15:1a:56:62:e5:34:e4:26:fa:11:d3:6e:95:15:5f:
                    39:9a:be:6f:f6:56:86:39:61:9f:c0:6d:bb:54:2f:
                    3d:fe:ff:57:17:25:c7:d0:95:20:0b:49:eb:44:ad:
                    c4:07:76:f7:09:ed:19:86:b3:6b:a2:f2:11:b1:c3:
                    1e:0e:fd:8f:4a:0c:14:e7:b2:81:31:2e:b2:57:c7:
                    dc:9a:66:07:58:2f:9d:4d:82:9d:e8:36:e6:83:5c:
                    de:85:22:45:6c:15:84:0d:d7:68:f9:2f:27:4d:b4:
                    82:8a:81:68:4a:ec:e7:30:92:e7:93:23:8d:b5:1b:
                    96:9a:ea:36:93:93:c2:5b:82:66:99:f3:2c:28:30:
                    00:bc:6d:c6:94:4d:21:27:d9:4e:80:06:69:e0:e6:
                    7a:37:86:5b:12:6f:44:19:ba:d0:47:2b:21:ba:30:
                    65:ff:06:f5:4c:03:f8:2a:24:82:f9:b5:28:db:b4:
                    55:94:06:d8:1b:97:a1:75:34:72:9a:af:d1:d9:57:
                    13:10:22:ec:a9:f9:e9:fe:19:51:f7:c8:fa:26:36:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:6D:A8:44:B9:5C:38:BD:C8:A9:37:9F:F8:32:F3:E7:4E:50:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl

            X509v3 Authority Key Identifier:
                keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:34:c7:6f:72:20:82:08:44:ce:45:a8:4b:a2:46:79:dd:
         07:27:8d:af:c1:11:cc:31:0f:05:58:7f:8e:5e:bc:09:13:e7:
         18:8d:81:53:17:fe:4d:a7:c8:14:51:ae:e2:15:ad:6f:a0:da:
         76:48:6d:8a:9e:15:e0:3a:77:58:f0:ee:af:36:30:19:39:fd:
         f5:0f:19:91:a2:f1:fb:ed:42:13:66:25:7f:b6:74:14:02:f9:
         e0:2c:31:0b:41:f8:23:69:d8:54:f8:20:9a:48:1a:6e:a1:5f:
         74:35:26:a5:22:a1:18:b5:e0:76:c2:08:97:a8:33:63:d9:b8:
         57:51:02:24:e1:05:6b:19:2d:a8:7b:62:e0:8d:28:c3:b9:e7:
         ba:35:3d:fc:d7:33:74:69:09:1b:13:20:86:f0:34:77:a0:fb:
         32:37:25:c4:ee:45:33:c4:4e:df:08:1b:c8:a9:d6:dc:52:63:
         48:0c:3b:e8:bf:6a:4e:a5:e5:9b:86:4f:dd:81:b5:10:8d:99:
         36:15:ce:24:cf:00:8e:7a:90:87:a6:c2:9f:4f:ae:45:e3:32:
         1d:57:e6:4c:ab:5f:28:9d:2f:7e:69:f7:eb:de:a6:b3:8d:b7:
         41:27:c2:f5:3d:38:30:1a:71:dc:75:2d:ba:77:a1:8b:a2:2b:
         50:c1:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:36:12 2024 by rpki-client on console-fra.rpki-client.org