Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
File:                     ad8a621a-0483-3ee0-899d-6e930c92bb98.roa (raw, json)
Hash identifier:          LzEF+03o9pdF63CvR/3EM41afyIkiVTWwfozfzBcK48=
Subject key identifier:   CD:8A:5A:10:67:B1:C0:78:F8:1D:21:19:EE:B9:BB:4B:C8:9B:E5:9D
Certificate issuer:       /CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
Certificate serial:       010D0C9F43285845840DC3EC355E006936E1CD80
Authority key identifier: C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.30.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c3:ec:35:5e:00:69:36:e1:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=87f50882-0af5-4c33-b9dd-515a276ea6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:b4:82:9d:76:f3:1c:c2:00:28:e0:e0:0e:
                    52:f7:81:6c:45:0e:38:c0:95:6e:36:59:d3:23:04:
                    5f:40:33:00:e5:94:0e:85:97:9f:5b:69:aa:43:e4:
                    ab:f2:ac:e5:e2:94:bd:94:29:51:40:9a:d8:f9:ab:
                    ca:3c:f2:cb:f0:8c:38:3e:5f:c1:ce:d4:b9:d3:db:
                    b0:fd:a8:33:b0:5c:e6:4d:6f:92:87:d7:1c:c6:0f:
                    2b:89:b9:a7:0b:00:87:20:1e:7d:36:b6:62:81:a3:
                    80:5e:9e:db:61:f0:9e:45:4a:08:f0:2b:4f:e6:e5:
                    3e:7c:fb:23:7f:5a:97:9a:3c:de:3e:e1:13:21:78:
                    27:f4:01:25:db:f1:4d:00:70:a5:10:c8:c6:f0:ea:
                    0f:90:f5:b1:1f:e5:57:a6:4c:82:25:2a:47:f8:c5:
                    f1:f2:31:44:78:cd:8d:31:98:53:c0:f5:c2:0c:aa:
                    dc:0c:fb:7f:b2:26:a2:1c:f5:30:23:f7:fb:76:78:
                    8a:2d:b2:dd:a5:03:76:f2:6d:d8:32:11:de:5c:f5:
                    5d:b7:36:66:32:e9:a6:02:86:61:ef:5c:cb:25:0b:
                    c8:84:57:a9:48:96:a9:61:58:af:19:77:da:30:d6:
                    5f:b4:26:45:b5:17:02:eb:53:49:1c:d2:b8:d4:ba:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:5A:10:67:B1:C0:78:F8:1D:21:19:EE:B9:BB:4B:C8:9B:E5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl

            X509v3 Authority Key Identifier:
                keyid:C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:21:9a:f9:c5:35:13:f6:3e:99:fb:16:09:8e:9e:10:a3:56:
         2e:5c:40:ab:b5:e1:f9:3c:6d:57:ed:dc:c8:cf:18:80:ad:34:
         3f:11:78:5a:97:cb:e2:67:21:01:67:68:1d:71:91:57:e0:50:
         f3:5c:8c:3d:fb:5c:b1:39:9b:69:77:6c:43:51:33:f4:68:66:
         28:63:d1:29:01:a8:f9:dd:76:23:c7:e0:7a:48:0f:28:4c:2c:
         35:51:6f:8a:e3:5a:f9:e8:ab:bc:76:ea:60:2c:4c:6f:0e:d7:
         17:52:45:b0:77:21:b6:38:28:3d:94:56:09:5f:d1:b7:96:05:
         b0:fe:31:a3:8b:f7:6f:5d:77:9f:2c:b6:52:7d:9c:83:6f:60:
         3a:64:6d:c0:2d:18:cc:5a:53:a4:32:45:26:36:bf:88:c0:75:
         5b:56:bf:6e:15:5b:66:7a:b9:24:ca:5e:72:f9:43:ee:86:8c:
         ff:7d:95:63:5b:c4:ac:09:b0:11:7d:4c:ec:4e:ec:66:b2:76:
         f2:53:65:53:50:12:d1:42:77:48:99:c5:27:81:a8:0d:05:ba:
         58:73:3e:18:9e:b6:7e:5e:6c:0b:50:35:09:ad:1f:23:22:9b:
         b6:39:fa:6a:fc:d3:bf:4a:d9:47:57:ff:01:42:2e:c9:23:4c:
         ff:25:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:27 2024 by rpki-client on console-ams.rpki-client.org