Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa
File:                     61336be6-bf50-329f-8398-7d3c69aaa3a2.roa (raw, json)
Hash identifier:          AFfSdUljRa/nNKrOP5yONq2f0/SNQ6qn7SJB5tmQvQQ=
Subject key identifier:   56:EA:A1:5A:FC:86:F5:56:C2:2B:0B:29:90:0F:B7:9A:51:0E:EF:72
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F43285845B897F7A9B66CA727BC84A000
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa
Signing time:             Tue 30 Apr 2024 20:41:00 +0000
ROA not before:           Tue 30 Apr 2024 20:41:00 +0000
ROA not after:            Mon 29 Jul 2024 20:41:00 +0000
asID:                     36511
IP address blocks:        192.149.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:97:f7:a9:b6:6c:a7:27:bc:84:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 30 20:41:00 2024 GMT
            Not After : Jul 29 20:41:00 2024 GMT
        Subject: CN=b9a7b2e5-daf9-488b-bd16-efdfdf0928fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:2e:8e:2e:f7:0a:bc:82:ec:21:db:1b:a9:
                    bd:67:ae:90:e2:c2:8b:28:ad:3d:c4:0d:a2:73:34:
                    72:3a:6b:be:ab:1a:97:88:31:1f:1d:88:56:bd:20:
                    53:20:d1:76:55:34:e9:d5:de:a0:5c:3f:cf:c9:f5:
                    2c:bf:75:79:65:09:61:27:77:52:6c:b5:6d:bb:77:
                    e2:a9:e2:f2:70:97:e7:92:b7:75:28:e8:5b:02:f2:
                    5d:42:ff:6d:32:ec:52:44:cc:15:e2:7f:24:0e:04:
                    13:68:44:07:87:b0:fc:d0:7d:fd:70:bf:0f:4f:a5:
                    83:14:a5:df:7f:8d:03:cf:58:89:ae:58:02:ec:80:
                    89:99:c8:d7:8a:2d:49:fc:97:77:97:42:14:be:83:
                    16:c2:44:0b:f0:7f:ca:57:e5:26:e8:7e:04:0b:c5:
                    13:cc:7a:77:8f:df:b3:31:cb:de:b9:09:1b:27:65:
                    ea:85:88:24:24:db:f7:a6:4d:af:9d:3d:c1:1d:33:
                    86:29:d0:9f:4c:46:a1:6a:66:7a:1f:07:55:44:9c:
                    3a:09:63:a0:69:5e:d4:e5:f4:50:e3:a8:0b:d6:6b:
                    d4:3b:c5:67:5b:f2:81:15:b3:92:bc:c5:ee:75:74:
                    46:79:25:ef:0e:5a:52:0c:e0:cc:11:58:d4:5d:3e:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:A1:5A:FC:86:F5:56:C2:2B:0B:29:90:0F:B7:9A:51:0E:EF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/61336be6-bf50-329f-8398-7d3c69aaa3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:40:c4:99:e6:ca:a5:ee:09:66:47:05:30:15:b3:19:08:4b:
         b6:d8:ee:2b:14:89:ff:38:48:40:7c:23:cc:93:95:04:97:32:
         4e:fb:ea:2d:10:94:30:07:95:21:12:92:d8:da:23:77:a8:13:
         d4:a1:ca:cf:f9:29:e8:6e:47:11:2e:0f:fb:38:d8:0b:4f:65:
         f8:84:4a:45:12:40:b4:22:e5:25:dd:fa:58:55:ab:a7:4e:23:
         24:d4:92:76:81:8d:41:50:1f:d1:4e:ca:c5:d5:68:57:cf:a6:
         bf:d0:77:95:1d:8f:9e:e4:2f:63:79:02:f0:f8:91:78:06:80:
         a2:c5:5e:f0:f6:d7:f6:15:2c:7a:c3:97:13:12:5b:e7:4d:e0:
         55:14:bd:33:e1:46:96:ec:3c:3a:9b:b5:36:bb:13:18:aa:1a:
         da:32:55:26:d9:19:76:9a:d9:bd:d8:c0:61:d2:bb:82:76:9e:
         9d:10:57:90:0b:0a:ba:4e:44:09:59:02:1b:e2:20:41:35:5f:
         ae:8e:7b:4e:fd:ea:4a:28:94:93:0b:7d:16:df:d9:3d:f0:ab:
         36:d0:8a:d5:33:36:eb:07:2a:70:e2:71:77:6c:0c:74:62:17:
         b7:d4:f1:d7:1f:41:bf:a9:c6:4a:60:79:55:f2:f9:01:f5:50:
         b4:39:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:34:40 2024 by rpki-client on console-ams.rpki-client.org