Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa
File:                     9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa (raw, json)
Hash identifier:          B6b2isGBfLBKB8ErWywj7SM15EbcFgxfnE+9O+JX6uU=
Subject key identifier:   A4:7C:43:E4:41:B2:B4:A6:43:62:5F:F6:AF:67:FE:42:A6:B8:63:88
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453747FAB701D849F38284FC40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     852
IP address blocks:        198.166.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:fa:b7:01:d8:49:f3:82:84:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=eb254d53-5688-4705-ba8e-e29557481366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:a5:90:1c:04:0e:5d:a6:22:b4:95:39:e3:
                    45:69:a4:2a:41:00:f7:58:32:e1:4a:2c:bc:a4:c1:
                    f2:8c:84:50:0c:c2:e7:63:d5:9b:b7:99:8f:33:3d:
                    09:6e:7e:7b:4f:45:27:63:0b:45:f2:70:82:19:fb:
                    b7:a5:32:54:79:53:21:d2:c7:e5:29:d0:c4:1b:59:
                    0b:46:b1:78:e4:1c:d9:2a:36:cf:27:fc:ee:a7:1d:
                    a1:13:3f:80:73:f7:3f:55:32:11:df:0d:aa:ba:5b:
                    b8:b3:25:61:fd:7b:8f:6e:4d:a1:c5:83:15:48:c1:
                    24:93:cf:cf:3d:8e:da:79:fc:79:d0:dc:ce:fb:a6:
                    ff:bc:5c:f0:b1:55:79:e3:e9:83:55:93:8d:34:2f:
                    f2:ba:9a:89:58:c0:2f:a5:2a:c7:d0:57:e5:c8:a3:
                    c3:66:0e:8e:ac:86:81:21:92:ed:c5:37:48:46:54:
                    00:ce:43:56:19:d3:cb:8f:99:08:58:87:5c:a9:72:
                    82:28:b1:73:ea:b6:e2:8e:83:2e:15:76:08:e6:b0:
                    6f:9b:52:7b:2e:44:36:74:3b:80:54:c0:0d:2b:16:
                    03:86:c7:5a:23:1a:b0:2e:a3:86:95:17:6f:7b:2d:
                    ec:86:4a:fd:c9:d7:4a:89:e7:ca:d1:6b:48:bc:76:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:43:E4:41:B2:B4:A6:43:62:5F:F6:AF:67:FE:42:A6:B8:63:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:88:81:1a:4e:6c:a7:0a:24:fc:3a:e4:e4:b7:43:b2:14:0c:
         a8:95:71:98:28:a9:d3:50:42:8f:14:3d:5f:05:d4:6f:9b:0f:
         f1:90:3d:ab:da:e3:f8:0c:3a:6c:f3:35:bf:aa:23:7c:07:42:
         07:42:a8:5e:1e:86:53:97:58:24:3a:4a:14:8c:02:6e:ff:f8:
         5a:8c:46:16:b1:ca:68:d0:d1:95:2a:30:72:c9:40:f6:a2:5e:
         6a:1c:23:e4:91:d6:85:ad:87:9c:65:41:a9:4c:99:44:7e:38:
         ea:a4:ee:11:a9:bd:ac:3d:f2:58:ea:50:b9:b7:d9:ac:d1:71:
         85:ac:25:f2:f4:e9:df:07:a8:79:e7:0c:79:4b:62:dd:65:4c:
         6a:ed:5b:06:d2:bc:71:5e:09:b0:8b:f4:af:3a:1b:a9:2a:a9:
         07:94:31:88:f9:d7:85:64:6e:19:c6:1e:a0:cf:5a:2e:3a:77:
         32:0e:ce:fd:3e:c6:5d:55:a0:8a:10:43:27:f8:48:1c:9a:cf:
         ca:97:73:85:9a:a9:7e:05:93:73:19:bf:d4:a7:f8:7c:f6:95:
         b9:d9:c2:cc:d0:9e:fb:14:3e:58:cf:0e:e0:9b:4a:d5:48:04:
         ad:fa:d9:6a:76:00:56:aa:40:d8:85:6f:1a:fe:95:f1:b8:39:
         23:bd:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:55 2024 by rpki-client on console-ams.rpki-client.org