Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
File:                     8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (raw, json)
Hash identifier:          8CodAtAua0aIDm2puWlSFXEB1XfdJVk64kPZ9eEfRA0=
Subject key identifier:   4F:06:DE:4F:81:A2:6A:EE:E3:E0:5B:DE:0F:8E:CD:E6:61:A8:14:96
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F432858452C1D4476B094B00767A24380
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     20237
IP address blocks:        192.103.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:44:76:b0:94:b0:07:67:a2:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=9cf1b431-40c6-47c6-a778-95cd4662ad44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:f7:7d:5e:35:3c:da:46:29:b5:91:da:3f:
                    44:f7:85:b4:fc:4d:95:33:cd:87:81:17:0d:b9:f4:
                    24:19:58:77:bf:74:8b:83:87:f5:47:b3:a2:f3:ee:
                    fb:50:67:fe:23:5d:98:36:31:10:e4:e0:00:8e:d1:
                    05:71:a9:5d:90:d1:2d:b3:47:9b:4b:d6:e0:bb:a1:
                    67:7d:77:12:52:59:29:65:18:15:bc:bb:c9:71:b9:
                    5e:8e:a9:d0:51:74:7d:fa:b5:70:f0:99:3b:6e:ae:
                    9c:2d:c9:cf:a6:ca:e3:9e:60:cf:03:27:7a:c2:68:
                    e0:0d:7c:66:bc:e6:83:59:ae:8d:ec:29:42:00:f4:
                    ef:38:51:c5:8c:34:a0:92:e9:8f:fd:60:49:6f:0d:
                    77:cb:b9:a7:5a:20:3c:c3:54:d5:c1:9a:cb:f3:dd:
                    93:04:50:26:a1:e9:3d:e9:21:2e:c1:64:90:c1:98:
                    cb:f7:61:f9:19:12:5b:d9:30:d5:e9:f4:3e:a7:68:
                    6a:b1:66:7d:95:d6:7b:2b:ba:69:26:21:9a:e8:0a:
                    ee:f1:b2:1e:5c:c0:21:ae:9a:ad:bd:9d:58:2f:ae:
                    53:44:88:a3:88:c6:e2:9f:e1:d4:c7:3f:4a:71:b9:
                    2a:15:83:66:32:60:35:a1:c5:70:d0:50:2e:10:d4:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:DE:4F:81:A2:6A:EE:E3:E0:5B:DE:0F:8E:CD:E6:61:A8:14:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:90:5c:a0:83:a6:4d:62:9c:ba:a4:6c:02:47:0a:a0:fd:14:
         c5:e2:3b:5c:9b:3e:a0:a1:11:d7:e3:3c:76:c9:4a:44:f2:ee:
         85:f2:6a:d6:ba:90:d4:5a:46:e6:a2:c8:0a:e0:5b:a8:b7:62:
         94:29:73:8f:59:71:24:db:99:49:3c:4c:33:0d:14:e7:ef:e8:
         6e:eb:23:98:46:38:12:0e:fa:19:b3:5e:99:47:22:c1:8e:25:
         63:11:77:76:54:e3:15:30:bf:02:06:73:ce:a0:4e:53:0a:db:
         9c:7e:d1:fa:84:00:07:a2:d3:66:b4:e3:47:ab:c0:3e:07:56:
         70:1e:c4:c8:c9:18:fc:0a:77:ec:89:d2:f4:a6:11:8d:a9:08:
         35:6e:dd:1f:ba:37:de:48:77:cb:d7:d6:02:87:f5:e5:77:b1:
         eb:b0:8e:52:08:3b:41:3b:8d:48:66:c3:f6:85:75:9a:a8:b6:
         3e:ea:28:33:11:a5:3d:bd:39:d4:6e:ac:7d:23:70:d3:a0:91:
         0f:c6:bb:18:83:01:e1:85:74:85:f6:75:85:71:b3:56:f4:c0:
         09:6e:3c:20:d4:54:b3:0c:f5:bd:32:bd:b5:de:7b:da:79:48:
         41:f5:c5:8c:cd:4f:da:16:ce:6a:18:c7:7d:1b:25:bd:a8:f5:
         dd:35:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:41:01 2024 by rpki-client on console-ams.rpki-client.org