Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa
File:                     327b3852-a90b-3425-9c39-6fc599ac324c.roa (raw, json)
Hash identifier:          E/AovfrUVtK8SG1etVB83UUf4Tx1sRTCPJgCoKuTUSQ=
Subject key identifier:   DB:6B:2A:CD:C2:EE:D1:9D:B7:AE:AC:05:89:63:FA:49:C3:CB:69:BE
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F432858459A634E24379A434C3554F680
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        152.130.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:4e:24:37:9a:43:4c:35:54:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=7b241a5c-3dd9-4a88-8b1a-dc7cdb91e4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:56:79:13:ed:0d:a5:68:1c:b3:72:f3:f9:
                    dd:61:83:ed:55:05:91:ff:40:89:38:16:bf:1a:f5:
                    1a:78:0e:40:53:50:6b:e5:1d:a3:a4:0b:be:58:01:
                    54:cf:cd:f7:11:20:bc:f0:6c:20:51:23:40:db:85:
                    5e:24:ce:99:08:75:a4:e0:ad:df:49:14:3a:7e:c0:
                    b1:72:7b:69:10:a7:05:6c:5f:3b:07:5e:0f:87:d3:
                    59:ef:13:89:a7:8c:0d:5c:61:e3:8e:b5:77:dd:13:
                    32:78:94:13:92:a4:56:20:77:f5:c7:ff:02:c9:33:
                    8b:84:80:eb:16:62:2a:54:37:30:05:12:0d:1e:c7:
                    81:fb:d8:b5:7d:fe:7c:5e:9a:c8:d2:fc:9f:71:d9:
                    fe:f7:4d:9c:14:f1:df:38:63:3e:50:c4:91:fc:01:
                    65:5a:46:a4:aa:f9:f2:03:e3:a0:8e:0b:6e:87:3f:
                    a4:81:dd:a2:0d:f6:76:9e:f5:9e:2d:cb:51:68:db:
                    5d:09:45:dc:da:0b:df:68:a0:53:94:fe:16:c5:e0:
                    c1:3c:55:19:7c:c5:09:13:fb:f7:77:e8:c2:a9:9d:
                    fe:8d:07:4b:3d:5f:27:f6:82:4f:8a:52:4b:77:0f:
                    47:3e:b3:0b:ef:18:54:43:32:25:ba:f0:5c:3d:e4:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:2A:CD:C2:EE:D1:9D:B7:AE:AC:05:89:63:FA:49:C3:CB:69:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:0a:a9:6a:8e:cc:ea:92:b2:3f:db:42:b8:93:6a:6f:0c:
         14:99:31:fa:f6:50:01:9e:ac:a7:d9:77:bb:6b:7c:c4:fd:9e:
         ca:9d:cb:04:c4:95:c3:98:57:fc:91:31:4a:90:e9:4d:8f:27:
         9d:4e:48:49:b9:1d:24:ca:4e:18:9c:08:4c:9b:e6:ef:16:b4:
         87:dd:65:5c:4e:20:51:38:77:a0:d4:3f:63:da:fc:81:0f:6a:
         60:35:1d:58:d1:ab:5a:9b:19:40:48:c5:e2:7a:1c:6f:d2:87:
         03:57:9d:92:b4:2d:88:0d:1b:c9:2f:62:f7:42:f1:3b:12:a6:
         58:eb:6e:a5:f3:04:90:a6:5b:c9:94:47:d8:fd:e2:f5:18:b5:
         e7:90:56:9b:54:fe:b9:0d:d7:19:19:75:74:d7:d3:45:db:b8:
         32:11:67:da:5e:b9:a1:af:59:4e:89:e1:4b:39:b2:ed:eb:0b:
         7e:a7:c2:a0:93:a4:72:55:f8:2c:c7:f5:4c:a6:a0:6c:bf:1b:
         d5:1e:e9:c1:c8:ca:65:52:a7:35:fe:07:32:63:e8:ce:5c:9c:
         e4:df:48:a1:8b:df:44:c9:b2:eb:3e:72:45:1c:f3:98:0e:98:
         11:8b:e4:c5:5a:fd:8d:ca:e0:03:02:e0:cb:62:5c:b5:11:e1:
         c6:b4:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:39 2024 by rpki-client on console-fra.rpki-client.org