Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
File:                     d2be373a-4ce4-35fb-810e-542b3f8888eb.roa (raw, json)
Hash identifier:          5F4m6iOj9Fbl48IqcgAB2CwSm5wbWZkXqhlhADFLQ2s=
Subject key identifier:   5F:DF:3D:39:83:7C:D1:5F:20:A7:04:75:A2:8B:15:48:8D:2D:3C:45
Certificate issuer:       /CN=13168988-4625-42dc-9138-e5632130d1ba
Certificate serial:       010D0C9F4328584649C409DD9B6C1EDDE1FC8980
Authority key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
Signing time:             Fri 21 Jun 2024 20:42:01 +0000
ROA not before:           Fri 21 Jun 2024 20:42:01 +0000
ROA not after:            Thu 19 Sep 2024 20:42:01 +0000
asID:                     16509
IP address blocks:        192.197.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:49:c4:09:dd:9b:6c:1e:dd:e1:fc:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13168988-4625-42dc-9138-e5632130d1ba
        Validity
            Not Before: Jun 21 20:42:01 2024 GMT
            Not After : Sep 19 20:42:01 2024 GMT
        Subject: CN=df30ab93-e2aa-421b-a381-b458a90edfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:78:59:90:84:4c:4b:50:d5:3b:29:82:5e:
                    54:f0:98:b8:66:d3:f0:3e:f2:92:54:34:97:da:53:
                    51:2a:6e:2e:65:7b:2d:72:52:d5:3f:ab:b3:2c:48:
                    74:45:a4:ed:25:0a:7d:79:11:c9:39:47:9b:9e:2b:
                    82:98:bc:cf:92:c5:8b:2f:89:06:d2:55:38:12:47:
                    b5:fb:04:90:21:7c:c5:2f:7d:6c:bb:7b:0c:7c:b6:
                    96:9d:41:35:49:43:d4:64:7e:76:32:82:4f:f0:0e:
                    ca:bd:e7:e2:93:7c:f4:bd:5f:40:b4:fb:e0:f7:d2:
                    16:b1:80:5a:b1:84:02:be:c1:4f:8c:ff:57:82:eb:
                    49:3a:61:70:99:0e:5a:6b:65:ee:6b:62:ed:ac:fd:
                    0c:7b:4f:46:19:7e:00:fe:25:4c:28:e9:1d:d8:e1:
                    53:80:86:c3:72:23:0d:af:ff:ad:85:3f:6f:e5:6d:
                    3c:2a:57:80:a5:dc:c8:a5:62:1d:51:7e:5d:a6:0a:
                    78:3c:d3:53:f6:e7:85:90:6f:78:42:1c:e2:26:9e:
                    9d:94:9a:8f:cb:f9:6d:e6:21:91:1f:ea:80:2d:2f:
                    5e:78:d8:43:11:92:ce:75:f6:aa:c9:8b:79:f6:65:
                    d6:43:dc:40:73:5c:e6:b6:fc:7d:88:de:7e:8e:ac:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:3D:39:83:7C:D1:5F:20:A7:04:75:A2:8B:15:48:8D:2D:3C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:40:a6:9d:2d:b9:fd:82:3c:06:c2:9d:51:e9:f2:1b:a7:25:
         28:01:99:fe:55:dc:c8:41:3c:5d:aa:de:d1:26:2a:f6:67:ef:
         b3:b9:49:c9:65:4c:05:8a:7f:22:c0:e7:cd:ab:48:48:d6:22:
         b7:ba:d8:cd:96:ed:c4:45:a6:2c:c3:fc:20:8f:04:b3:63:93:
         eb:bb:4f:77:b5:7b:d1:6e:59:2b:c1:84:34:8e:8c:6a:af:ca:
         f1:c1:c1:6e:b6:cd:2b:31:5d:44:32:6e:26:57:f9:98:76:f4:
         a7:af:45:91:91:e9:33:96:a9:8b:19:35:91:58:57:5f:f4:9f:
         2a:be:33:1c:f3:04:50:96:ed:a3:72:2f:33:01:d6:b5:73:fc:
         d0:f6:06:81:ea:b3:fd:43:64:5b:34:29:46:d7:24:92:d3:43:
         c4:ab:1c:60:9e:7f:e5:8b:b8:11:a5:a4:dd:d2:36:45:ab:29:
         35:3e:67:be:ba:5d:8c:31:b6:bf:b7:3f:86:c2:39:dd:4d:60:
         3e:72:09:3f:6b:b0:bc:78:2a:24:f9:83:b5:c4:43:88:6e:29:
         cd:18:80:8a:f5:55:9e:27:d2:ac:dd:4c:1c:ff:58:42:2e:e5:
         8a:fb:64:51:ea:af:31:74:f7:4d:a0:ee:f3:91:c7:fe:54:2c:
         a9:c9:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:54:00 2024 by rpki-client on console-ams.rpki-client.org