Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
File:                     10029257-bda1-3754-b670-e0c603bafdfc.roa (raw, json)
Hash identifier:          PtsjizOV6vdqmkecPvFT+EFgNG+xEIRWHJpUuecBuH0=
Subject key identifier:   DE:7C:E6:A0:4C:22:2C:23:41:66:5B:C4:17:8E:23:FF:8A:14:7C:6E
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F43285844C0BFA533552AD540E4918A30
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
Signing time:             Fri 02 Feb 2024 02:00:26 +0000
ROA not before:           Fri 02 Feb 2024 02:00:26 +0000
ROA not after:            Thu 02 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        199.187.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c0:bf:a5:33:55:2a:d5:40:e4:91:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Feb  2 02:00:26 2024 GMT
            Not After : May  2 01:00:26 2024 GMT
        Subject: CN=4a96f1bd-a970-4cca-b9f8-f5b0c4178626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:e7:10:64:6c:72:30:47:bd:bd:3a:dc:6e:
                    33:97:10:ac:e2:0d:65:40:0f:d4:da:45:77:55:52:
                    1a:2c:94:5d:fd:e4:8b:1a:c5:e7:74:27:9d:c5:f9:
                    6e:b8:da:31:18:e6:56:b9:6e:5f:40:69:28:f4:dd:
                    d5:ac:54:39:eb:9d:d4:f2:ce:73:7c:51:de:cb:ab:
                    6e:bd:f3:26:e7:12:54:4f:de:d3:d2:b1:a9:d9:ef:
                    18:48:96:13:7d:95:d2:31:b9:5c:c6:62:c4:46:47:
                    a1:cc:bc:a9:42:54:e1:0d:ee:df:8c:c0:08:2c:86:
                    e3:b7:1f:f6:81:58:33:ac:85:29:10:59:e0:01:1b:
                    be:5b:cf:20:35:8e:d1:07:a2:c6:c5:08:ee:c8:84:
                    c2:50:bc:97:5a:ea:97:bd:2b:2d:65:6d:02:22:2a:
                    d2:fb:89:f5:03:ae:a7:dc:e8:e2:9c:e2:59:ee:b1:
                    84:a0:2f:f1:dc:bc:c5:1a:26:ad:98:5f:01:e6:6f:
                    8f:06:6e:8a:0a:00:5e:0f:07:4c:ce:3b:8d:bf:89:
                    e4:7f:90:dc:e5:e4:bb:b3:23:2a:55:86:36:88:04:
                    c6:0e:cf:c0:d5:dd:f0:06:54:0b:b9:39:ed:2e:4f:
                    81:db:26:fe:3d:b0:7b:48:3c:2b:34:89:80:fb:9b:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:E6:A0:4C:22:2C:23:41:66:5B:C4:17:8E:23:FF:8A:14:7C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:37:63:5b:a2:7c:5c:5f:46:36:89:e2:08:c3:7a:7d:4e:
         25:ed:01:5d:69:02:8d:76:3f:34:45:14:30:f7:d1:7f:68:5b:
         1e:97:7c:bd:e0:54:6d:c2:e4:3c:24:4c:a7:cd:a5:01:48:88:
         fd:d3:60:8a:56:d6:8b:7a:29:e7:61:6f:b6:09:96:76:c2:79:
         12:f0:76:f9:bc:f9:6b:c2:be:c7:a7:09:04:51:93:6a:41:75:
         d6:ad:06:18:75:fe:17:bc:57:cd:39:25:b9:6b:5a:26:70:85:
         3a:90:ce:a5:92:ce:1d:0d:03:ca:fc:f5:80:57:00:4d:37:73:
         29:b4:35:64:1e:0c:fa:7f:68:b2:de:bb:ca:59:41:a6:a1:5a:
         63:04:d0:b0:96:13:81:db:e0:09:01:cc:7a:a9:44:a6:dd:f8:
         a9:5a:a4:44:49:45:46:86:c2:a9:b9:dc:02:9e:50:be:9b:38:
         5e:e0:87:66:dd:61:f7:f3:da:68:59:5f:77:80:28:92:b6:6a:
         6d:a4:14:33:c9:3b:dc:71:61:a6:f9:00:9b:bb:2a:26:9a:d9:
         95:13:9e:68:69:58:9a:db:1d:a2:94:82:0d:31:6f:86:e9:8c:
         2f:8e:51:80:06:47:1c:22:ee:a3:a1:84:c2:cf:e9:68:53:3c:
         13:6f:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:17:47 2024 by rpki-client on console-ams.rpki-client.org