Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
File:                     0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json)
Hash identifier:          ujeubEe7pkf5ibX/SKdgrJBuSzd+oen0fH4lrQBvzoU=
Subject key identifier:   DD:4D:C3:D3:ED:B5:1E:09:BA:B6:7E:73:3E:99:80:EA:1D:AF:67:8B
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F4328584582A89E71F34BB126CE551EB0
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     209
IP address blocks:        199.191.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9e:71:f3:4b:b1:26:ce:55:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=43307148-90ca-4f89-9118-26a2cfc0120d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:72:4a:2f:1a:73:f8:7c:c1:9a:20:39:f6:
                    20:5c:5e:b9:ac:49:59:2c:24:9d:05:23:63:14:06:
                    4f:42:51:b2:9d:7e:a1:7f:88:2a:32:26:ba:90:ea:
                    bf:1d:46:2c:41:70:28:c8:1e:50:6d:03:7d:bc:39:
                    b5:fe:f9:61:11:33:8c:f6:4b:89:38:9c:94:cc:5d:
                    d8:c1:36:16:5a:19:c8:21:0c:4f:00:ff:43:d1:85:
                    66:04:eb:39:3a:4e:f4:f1:12:9c:88:39:4e:69:48:
                    d2:8f:2f:ea:00:42:26:a5:db:90:29:ae:cc:7d:8f:
                    22:cf:97:a0:ec:32:97:b7:be:84:70:28:31:89:b9:
                    81:7a:2a:a9:1d:23:99:48:d5:a5:ce:e0:b7:2d:30:
                    12:44:8d:24:26:ef:3c:af:1f:0e:57:51:b6:fb:47:
                    6c:4a:c9:38:9a:ee:fc:68:31:02:21:36:e1:85:bf:
                    cb:58:95:05:94:70:54:5f:a8:4c:35:e7:5a:bd:db:
                    db:93:24:94:a0:d5:20:3f:fa:85:b7:2b:3a:58:f0:
                    a3:fd:ec:16:c9:41:34:d1:99:fe:dd:a1:7b:73:40:
                    97:3e:5d:9f:73:c7:15:d4:5f:66:64:35:23:88:e8:
                    1c:d7:95:b3:bd:3a:f0:31:75:e3:8b:ce:ff:c3:e0:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:C3:D3:ED:B5:1E:09:BA:B6:7E:73:3E:99:80:EA:1D:AF:67:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:10:db:7a:78:1f:a8:0a:00:74:c9:e1:ee:24:34:70:04:19:
         ca:ac:1a:3b:a9:35:af:b5:a3:e8:6b:27:4e:bb:30:38:75:9d:
         76:b1:dc:5a:44:0a:6f:6a:24:b1:68:fb:44:22:fc:18:65:b3:
         8f:2c:3c:b5:bd:8a:0a:ad:85:7b:fb:18:8e:ea:f7:0c:0b:9f:
         a6:9f:ec:48:26:4f:01:05:53:cd:e2:15:5c:69:b2:4d:b2:90:
         0c:a2:90:fe:0e:65:18:ae:e6:ae:99:96:aa:7d:44:65:df:80:
         46:ff:44:28:63:e0:14:f2:f1:8b:3d:fa:ef:0a:24:c2:98:c9:
         33:a0:f7:56:ae:da:0d:8f:b2:9e:81:52:86:cf:e8:0a:97:5a:
         b3:d4:e6:db:65:2a:1c:82:dd:68:60:48:d1:e8:ec:c2:dc:d3:
         fc:84:64:91:dc:b6:fd:e6:5d:c0:49:a2:e8:73:70:95:12:e6:
         2d:97:60:5d:0c:f3:b2:94:46:da:da:5f:79:8a:49:10:d8:db:
         45:52:8c:06:69:4c:ac:a1:8a:a0:48:07:ff:e2:f0:87:b5:f2:
         55:cc:db:ed:db:16:93:31:ed:dd:02:5c:63:c2:69:d1:3e:3a:
         a2:ca:61:ae:07:ae:d3:66:5b:fd:fc:21:c2:9a:c9:06:84:6f:
         b6:eb:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:19 2024 by rpki-client on console-fra.rpki-client.org