Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa
File:                     06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json)
Hash identifier:          ZEp5Ei4K9GoT738wH/rStAooI0Bty/+AaU41dJ6comE=
Subject key identifier:   1F:97:22:CE:16:1C:87:D1:90:67:7C:2C:3B:C5:5F:F2:BC:5A:FD:D8
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F4328584582A89E8123268A7D42FF91C0
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     209
IP address blocks:        199.191.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9e:81:23:26:8a:7d:42:ff:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=2f820992-f9b3-4656-bb6a-417444c1c0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:db:e0:23:bf:87:b2:5d:60:81:d6:4b:05:
                    be:19:6e:8b:a2:30:c6:c8:15:e8:99:af:e7:73:87:
                    31:25:65:38:9c:63:c2:4b:63:50:b7:e5:38:18:cb:
                    aa:41:69:df:cf:d4:12:88:87:9a:ff:7b:6a:8d:99:
                    98:fb:41:26:d6:cb:75:60:fc:15:c3:30:79:e3:e7:
                    0d:bb:08:fa:9a:3c:6d:ac:45:fe:a9:d3:19:4f:d2:
                    66:57:ce:ea:a0:54:32:12:97:17:98:e1:f1:6c:58:
                    17:90:ad:9c:69:ad:bc:f3:20:f5:07:b1:0a:78:c6:
                    f4:3e:82:56:9e:49:06:58:91:25:1f:91:f9:1c:0e:
                    94:de:b7:98:99:6d:fc:26:7c:3f:01:3d:ac:a5:fe:
                    9e:04:bc:27:c0:72:5a:73:81:77:bc:7a:4c:62:cd:
                    fa:d5:b8:3a:2a:02:58:de:0d:e7:8d:d9:e3:62:14:
                    03:18:02:8a:e0:75:e6:5e:4d:59:a6:c7:62:fe:c4:
                    b8:0a:b3:08:de:c2:35:11:48:12:37:e9:f7:dc:79:
                    db:fc:e6:f9:0c:1f:51:99:e0:e2:83:21:3b:78:1f:
                    06:bc:5f:b1:a9:36:12:e5:e6:57:fc:ce:c0:58:12:
                    0b:45:62:44:85:35:16:6b:81:c3:82:b2:80:7a:03:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:97:22:CE:16:1C:87:D1:90:67:7C:2C:3B:C5:5F:F2:BC:5A:FD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e8:1d:3d:2d:d2:e5:c1:0d:66:61:65:97:e8:59:e9:9a:69:
         df:0c:28:fe:08:2c:01:76:e3:6a:d5:d9:b2:f7:c4:56:4f:cf:
         56:d5:4c:dc:90:d8:5d:8f:73:ab:b0:4b:05:27:b6:18:83:07:
         77:0e:b3:40:cf:8c:7a:80:0e:e0:4b:32:4f:82:3f:d4:8d:e0:
         bf:70:34:c7:3f:43:5a:71:66:74:a9:12:69:9a:df:de:85:5e:
         f4:da:39:5e:ec:1c:f2:23:eb:5e:f2:b0:87:fe:19:10:a2:e6:
         ee:81:e0:bc:fc:b8:a7:b8:2a:a4:2d:0c:b6:81:9d:c6:a6:e6:
         73:bf:d6:37:d9:07:6a:45:4c:27:90:e5:db:93:eb:dd:c8:52:
         1f:7c:92:ca:d5:36:a5:c5:e6:90:a5:ad:b7:d6:65:3a:76:e1:
         b4:92:bb:fb:e0:8d:2b:9f:5d:c8:df:9a:74:a3:5d:93:a2:13:
         4d:35:08:76:d0:a1:c4:ab:7b:f5:96:62:dd:6a:48:ab:28:e1:
         47:01:8d:b6:43:a5:07:60:bc:9e:64:70:72:f9:8f:58:e7:5f:
         1b:5e:6a:18:ab:8d:ab:23:e3:db:1b:ad:04:33:ee:69:a8:a8:
         50:e2:e8:c9:6f:ee:e8:4d:61:a5:b7:3b:2a:97:e7:5d:bf:c6:
         7c:c6:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:19 2024 by rpki-client on console-fra.rpki-client.org