Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
File:                     d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json)
Hash identifier:          XxhNQNFuPI6sCHc4lwJLNQSUEYHIzv+hhplYva8Jdlg=
Subject key identifier:   44:EE:7C:74:66:0E:41:ED:87:49:E5:CC:96:72:5B:37:66:15:98:82
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858457D1327925E4D5141FC0246E0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     211440
IP address blocks:        199.48.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:27:92:5e:4d:51:41:fc:02:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=f04f73c8-7f56-4416-9638-75f19d2551f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:b3:fb:04:da:5e:fb:e2:9f:a0:73:05:fc:
                    33:ab:27:5d:4a:46:d7:5c:c8:b3:12:b5:84:82:d3:
                    ed:e4:00:84:f7:ea:ae:9a:08:78:60:ca:87:c0:64:
                    a1:60:1c:90:1b:55:ff:1b:6f:6a:b0:eb:80:22:8f:
                    96:06:a7:60:63:4b:00:f8:7a:5b:35:0d:a6:6e:75:
                    9b:92:fd:00:cd:ac:42:1c:a3:72:91:1f:f7:2c:6e:
                    a1:dd:e5:0f:0d:ec:2f:24:95:dd:e7:5c:3f:0d:8d:
                    38:81:5f:a0:98:e4:c2:fe:d8:1c:61:f2:23:f7:bb:
                    26:25:ce:6b:50:ec:0d:92:2a:5c:15:1c:dd:57:27:
                    b0:85:b3:cc:64:53:75:7c:99:dd:65:cb:1d:c4:ea:
                    96:63:11:59:58:5c:06:b7:69:0b:ea:ae:32:26:c5:
                    f1:7e:81:0e:58:eb:24:11:0f:6d:4a:fb:21:9f:0c:
                    f2:56:5d:9e:00:cc:79:0b:26:7c:7d:47:9d:74:b9:
                    f9:05:52:8d:7c:75:a7:b5:5e:38:40:52:73:3f:f0:
                    03:37:0e:ed:41:52:bb:7f:37:72:0a:ad:34:01:3c:
                    5a:69:65:b7:1e:6a:65:a0:73:02:21:32:be:3f:2f:
                    02:80:a7:c5:74:ff:94:80:ce:38:a5:5d:0a:0d:aa:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:7C:74:66:0E:41:ED:87:49:E5:CC:96:72:5B:37:66:15:98:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:47:65:9b:41:ba:d9:c0:d0:a8:a8:f9:ae:10:10:51:76:56:
         e0:5a:f3:ed:6d:d4:78:94:50:8b:17:7a:5a:d3:e5:0d:e9:cb:
         14:d6:87:d9:0e:41:49:56:28:af:8c:b6:20:9f:ee:42:b1:9a:
         bc:79:b9:70:3f:83:d3:ce:f1:94:20:92:db:61:a5:6b:be:d2:
         38:2d:65:68:1a:e2:a5:50:1b:4e:fe:06:b2:5f:01:cf:63:50:
         70:da:46:eb:d2:d1:e0:8b:86:24:6d:6f:06:1d:17:a0:e6:8a:
         87:88:1e:37:c0:fb:d2:00:65:d5:91:8e:cd:88:54:78:1f:36:
         34:64:22:4c:79:69:3f:1d:f2:58:50:2d:de:40:5b:bf:5a:44:
         e3:f8:c1:c2:6d:ac:44:28:4c:6d:db:25:ba:8c:96:6c:20:73:
         d1:14:3a:63:32:b0:93:29:ca:db:dc:94:ef:1f:98:ee:03:83:
         c3:6d:a4:16:9c:8d:a0:5a:5b:bd:9e:a7:35:bb:6a:04:1a:6b:
         69:25:8c:aa:b7:76:6d:d1:55:9f:75:87:c0:b1:33:24:61:c8:
         25:48:ed:2f:17:4f:9a:86:0a:19:ee:02:bc:1a:5e:ac:ba:d9:
         5d:19:a8:8c:90:b0:05:e4:14:86:fa:ba:19:a5:29:9a:76:cb:
         62:96:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:10:32 2024 by rpki-client on console-ams.rpki-client.org