Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c445d53f-16a6-3a9a-8156-fa17fb2e5d1c.roa
File:                     c445d53f-16a6-3a9a-8156-fa17fb2e5d1c.roa (raw, json)
Hash identifier:          vEoXmvhUGH4HjIuymDG+kBUeshDPEi84TihBkvlUQ6M=
Subject key identifier:   CF:22:33:16:F9:CC:E2:FA:B7:1B:8E:18:8F:A9:4B:D1:FE:B8:B5:B1
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845A9BE131BAA3DA35832A14040
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c445d53f-16a6-3a9a-8156-fa17fb2e5d1c.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     203963
IP address blocks:        200.229.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:13:1b:aa:3d:a3:58:32:a1:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=7bb875de-5753-4922-80d2-a4683e69aff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:0d:00:40:5f:bd:4d:34:81:ee:59:0e:25:
                    0a:23:94:18:bb:23:b5:20:ff:49:19:7c:f1:d2:cc:
                    a3:8d:2a:90:77:80:11:74:86:09:96:06:05:bf:9c:
                    21:ba:e5:f6:22:5d:5c:33:77:e3:64:54:21:40:34:
                    17:db:de:b1:40:15:c6:5e:16:45:41:7a:4a:c6:7c:
                    55:30:85:b1:ca:00:fe:2d:3d:5c:e3:df:e5:be:d0:
                    6d:a4:f1:9c:6c:f9:73:e2:f2:b4:21:76:c9:d6:e7:
                    0e:48:a8:f9:d4:3b:eb:d2:58:3b:2f:81:f0:5d:07:
                    98:58:4d:e8:63:6b:59:08:24:6e:9b:49:7b:c4:42:
                    33:47:6d:64:de:52:77:09:63:1d:66:a7:ab:52:92:
                    e8:51:62:9d:6e:75:00:91:f9:e7:80:5b:41:eb:65:
                    3f:76:94:4f:23:7c:ea:24:86:f6:a6:58:d2:f1:2a:
                    85:60:5d:92:ef:ac:f0:ba:56:15:75:40:65:e7:a6:
                    e0:28:cf:5d:04:c7:c8:85:68:c4:b1:08:03:de:a7:
                    3e:a9:41:ea:35:fc:29:ef:c0:63:37:a6:75:4d:94:
                    6a:ef:14:4a:ad:c8:a2:66:d2:6f:f3:8d:53:d2:e5:
                    8f:dd:cf:cc:38:26:de:b0:6f:d5:4e:62:f0:53:62:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:22:33:16:F9:CC:E2:FA:B7:1B:8E:18:8F:A9:4B:D1:FE:B8:B5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c445d53f-16a6-3a9a-8156-fa17fb2e5d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2f:c7:e8:7a:c7:a7:6a:f5:e4:9d:e9:5a:37:38:87:d4:29:
         f4:5d:4e:6d:04:68:4a:da:42:5a:dd:d4:39:70:87:70:9a:87:
         78:f8:4f:94:0a:d8:bd:13:e7:ba:7d:84:e7:82:5c:1e:a1:cb:
         4c:5d:ca:8e:8b:eb:e3:f4:85:a6:77:68:25:b2:ce:e5:d9:48:
         44:18:4b:64:b3:1b:07:aa:9b:a2:d7:6c:f5:2b:0d:a7:1a:8d:
         60:3e:f2:4e:0f:c6:b6:b0:4a:ab:8d:dc:0a:55:60:77:ff:1b:
         20:c0:31:14:2b:d5:00:ae:fc:b3:f6:1c:b6:ab:d8:ae:57:58:
         36:43:75:9b:01:cf:48:e3:67:55:ce:83:f6:a7:a8:3f:ca:42:
         29:af:c4:58:43:97:ae:56:f5:5c:aa:9a:47:d1:a9:cb:3e:61:
         a7:15:af:e5:63:7b:7c:69:70:b1:18:3e:1c:0c:fd:82:74:b1:
         4e:ee:8b:d3:5b:34:87:c1:1d:bb:fe:f6:48:12:ed:0f:7e:b1:
         3f:f8:46:06:08:72:94:89:b5:aa:d7:3b:93:17:1b:da:b1:bb:
         9a:e1:0c:61:91:b7:5d:09:4f:70:38:82:d0:88:9f:c9:5a:5d:
         87:09:0a:c9:4e:93:f5:9d:e5:b3:b1:02:65:52:85:3d:d4:be:
         ae:70:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:35:02 2024 by rpki-client on console-fra.rpki-client.org