Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
File:                     657a060f-11de-3437-8e3b-e36a3da029c5.roa (raw, json)
Hash identifier:          6UECeRmZnKtLSvH6hKyEDGfCqtSQSdguX2/P5bZuTpw=
Subject key identifier:   E8:ED:B6:E4:7C:52:51:E6:63:B7:B6:D1:56:5E:E7:2C:E3:8E:64:F8
Certificate issuer:       /CN=5886029e-a569-4937-b21c-91a2f3965848
Certificate serial:       010D0C9F43285845A9BE08B704F5AE2E71916E40
Authority key identifier: 6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        199.196.235.0/24 maxlen: 24
                          199.196.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:08:b7:04:f5:ae:2e:71:91:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5886029e-a569-4937-b21c-91a2f3965848
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=7617b9d5-1922-49da-956f-da195dc3b428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:e5:91:9e:f8:39:74:6f:78:bb:80:56:ea:
                    72:c5:d1:98:a8:6e:10:00:b6:04:18:a5:38:57:0b:
                    72:db:8d:a6:d7:0a:9e:2b:08:ae:68:42:ce:dc:7a:
                    e7:a2:b0:2b:41:19:04:e5:87:c3:39:8b:cf:24:44:
                    96:fa:e0:d9:ad:e7:2d:61:f6:35:1f:49:de:fe:63:
                    c7:bd:9d:2e:0c:64:9f:21:59:aa:d6:88:65:95:18:
                    46:22:d8:9b:dc:62:96:78:a3:ab:7e:08:8d:f5:0f:
                    a2:59:86:02:ef:53:34:fc:f0:b6:0a:8a:13:8e:9d:
                    fa:3b:46:42:6a:f9:d0:4f:0e:54:2e:6e:94:88:ba:
                    1c:c7:95:15:d3:83:44:d2:88:24:7c:09:4a:e9:4e:
                    fc:d0:e1:39:08:61:d7:8c:8b:d6:6c:63:b5:84:f0:
                    3e:44:2c:24:df:76:95:8d:d6:22:bc:0a:64:ea:1b:
                    e0:8c:03:0f:90:04:a6:d5:1d:18:97:08:da:f8:31:
                    32:6e:10:b9:19:72:c2:a1:a5:c5:e2:a1:8b:a9:4c:
                    9d:7d:24:87:95:98:5a:8a:39:d4:48:70:fb:cd:59:
                    3e:50:8c:8b:d1:f9:6b:8e:5a:36:63:42:10:c7:e0:
                    12:bc:55:a9:0c:6f:bb:eb:98:fa:b4:4a:b9:62:c2:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:ED:B6:E4:7C:52:51:E6:63:B7:B6:D1:56:5E:E7:2C:E3:8E:64:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl

            X509v3 Authority Key Identifier:
                keyid:6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.196.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:5b:bf:b0:ac:2d:d6:c6:e1:1c:a7:e9:cf:0c:8a:c4:bf:13:
         bc:06:82:78:43:63:65:fa:89:09:c4:4a:e8:6b:31:99:7d:8f:
         7f:19:2a:eb:40:43:96:62:06:5b:65:6b:3e:64:8c:f9:37:2d:
         41:d8:08:a3:e4:6c:09:4c:ba:fb:26:ac:a8:81:62:fa:12:8b:
         e6:3a:34:81:38:ac:dc:a5:a7:b3:88:fc:cd:4b:de:f3:a2:57:
         dd:39:90:57:f1:35:29:fb:ec:9a:a5:26:52:e1:a5:56:d6:17:
         48:5e:87:e3:cd:ed:62:21:6a:58:d6:dd:a5:16:9d:53:a2:67:
         d4:d2:b6:ac:7b:6b:fc:32:4e:f1:23:4b:5a:5e:5c:4e:db:7c:
         15:65:92:99:3d:8f:11:ef:90:00:5e:0b:92:5d:21:d4:09:2d:
         c7:ca:30:d2:a4:22:89:41:3c:20:30:3f:54:5c:c3:32:42:b9:
         77:82:30:d6:37:a0:6f:b8:5b:ec:ab:7c:18:04:84:ae:c4:c5:
         26:81:7a:06:ac:00:f6:48:4c:46:e6:47:bb:af:c5:52:44:80:
         c9:fb:50:43:fc:a2:5c:7c:a4:09:a8:cb:59:95:5f:3f:1c:5f:
         4b:4d:9c:0c:a3:4f:f5:26:9b:5c:01:f3:e3:64:dc:b1:15:8d:
         c3:0f:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:25 2024 by rpki-client on console-fra.rpki-client.org