Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
File:                     83b266a8-92b7-3018-a36b-711439e055e8.roa (raw, json)
Hash identifier:          57wXHTbtxPLAjduJ2zTOC7t/34dy8bGJideffnmr0eQ=
Subject key identifier:   4D:7B:99:7B:57:8B:50:59:C1:FB:E6:55:9B:EB:49:F5:D4:33:EF:25
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285845A428AA2DD3CE3A98D843DA80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     21859
IP address blocks:        107.148.163.0/24 maxlen: 24
                          107.148.162.0/24 maxlen: 24
                          107.148.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:aa:2d:d3:ce:3a:98:d8:43:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=dd88529b-877b-4354-8eb7-dfe8094fc15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:db:9e:94:a7:13:cc:cd:f3:cc:77:7e:66:
                    c6:08:59:dc:d6:94:b4:eb:c6:47:fd:d5:a2:f0:c0:
                    a7:72:a9:8f:e7:1e:8f:84:0e:38:ca:ee:3c:6d:83:
                    56:14:6b:90:1a:53:8c:1b:b3:9f:17:d6:e5:b9:2d:
                    3d:ed:49:ef:ee:dd:8b:5c:ae:58:7a:0d:c1:75:9c:
                    2a:93:b2:53:ad:13:4c:34:8b:db:1c:07:ee:5c:50:
                    33:03:17:70:aa:54:bf:2a:bf:33:95:69:19:bf:9c:
                    ac:e2:0c:37:db:75:ae:48:87:0b:9f:f9:99:6b:fe:
                    77:c8:3d:10:10:c6:81:92:1b:71:7b:91:05:2c:70:
                    81:bf:35:31:75:2a:d5:8b:69:98:c8:05:df:b4:1b:
                    5c:93:c4:cd:92:f3:ff:bd:44:df:4b:7c:e2:2d:fd:
                    bb:75:4d:02:e1:bb:d2:d2:8a:6e:0f:a9:ec:6a:cb:
                    53:7c:98:85:42:a2:9b:b4:4d:ef:ef:8c:db:ca:a6:
                    9e:25:23:9c:52:d2:e6:95:0a:13:b5:33:19:79:86:
                    1b:a1:2f:a3:6a:52:ed:3f:5e:bb:6a:7f:56:c5:db:
                    87:91:63:88:2d:19:69:a2:78:b5:5c:97:4d:04:17:
                    ed:25:d3:6e:46:e5:ce:4b:b9:f9:97:3d:67:b4:43:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:99:7B:57:8B:50:59:C1:FB:E6:55:9B:EB:49:F5:D4:33:EF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/83b266a8-92b7-3018-a36b-711439e055e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.161.0-107.148.163.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:bc:d4:f9:94:1a:0e:a6:ee:0a:ef:d0:6c:2a:c1:fa:c6:
         91:b1:26:34:91:0f:85:d3:30:d9:2a:03:65:97:5d:5f:cd:ba:
         30:4b:36:2d:de:f0:34:eb:71:27:2d:9d:88:0f:e9:a5:23:57:
         a1:2d:fd:3e:d0:7e:ea:84:fe:60:d9:cd:de:09:16:b3:32:cb:
         6d:27:3b:68:df:6c:56:c5:30:11:42:77:ab:f8:59:40:9f:ad:
         b5:6e:f1:5d:5d:2b:1d:5b:be:ec:2d:3a:6e:1b:d4:c6:66:cf:
         1e:53:9e:73:f9:67:77:ba:ab:3a:08:8c:f5:dc:72:18:64:43:
         28:f5:54:49:d2:d4:ea:01:bf:7c:cd:86:98:6e:a2:6e:61:3b:
         44:af:44:fc:b6:0b:55:b4:d1:41:63:b8:03:4f:cc:7b:38:1d:
         12:89:73:b5:a3:27:2c:48:19:90:aa:20:c6:1c:c8:d7:8d:5e:
         a3:ba:3c:19:55:09:90:03:92:84:53:0d:60:02:0c:b3:6d:f6:
         26:ac:ea:5a:e6:75:2f:b8:35:40:e5:a5:31:c0:ae:10:2b:72:
         59:35:56:7c:b2:bf:00:ff:23:be:9b:1d:cd:72:eb:c5:96:c0:
         a4:80:4c:c8:83:51:b3:01:4f:35:ee:5e:16:e3:bd:79:f7:29:
         99:a5:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:44:31 2024 by rpki-client on console-fra.rpki-client.org