Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa
File:                     c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa (raw, json)
Hash identifier:          Sg4ON+bsMn5MkRDPXSHKswc3xIQYV8zjxa3YyzeJIpw=
Subject key identifier:   AD:55:4E:28:87:5A:5F:CD:DF:B0:3D:BF:A0:1B:47:8B:BE:59:C6:04
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F43285844E6FFF05ABE02AD79D42173C0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa
Signing time:             Thu 15 Feb 2024 18:50:45 +0000
ROA not before:           Thu 15 Feb 2024 18:50:45 +0000
ROA not after:            Wed 15 May 2024 17:50:45 +0000
asID:                     16509
IP address blocks:        192.88.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:ff:f0:5a:be:02:ad:79:d4:21:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Feb 15 18:50:45 2024 GMT
            Not After : May 15 17:50:45 2024 GMT
        Subject: CN=8826d21b-984b-4e56-a79d-ba11a04f4de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:3b:1a:8d:0e:fc:7b:98:ed:2e:a7:93:98:
                    9c:20:47:f3:75:10:e4:72:44:76:07:3a:34:86:d2:
                    f9:49:95:8e:49:2f:76:7a:a7:40:2e:64:74:e8:c1:
                    8e:f0:d1:01:a3:3e:6a:44:c8:f0:5a:4f:dd:e8:83:
                    a8:c2:29:00:23:1d:34:89:e9:4f:d1:71:39:15:c6:
                    a6:10:f7:69:22:df:5f:be:d5:a2:0d:4d:2b:6e:2c:
                    cc:9a:8c:88:b2:74:39:18:6b:78:9d:fb:1f:ac:34:
                    87:db:34:99:85:7c:f0:7f:49:0a:8f:8d:a1:59:fe:
                    e6:f2:ab:bf:91:14:be:45:97:4f:cd:89:f9:08:7e:
                    69:46:aa:d7:37:92:dc:42:f6:bf:50:21:e9:de:7e:
                    62:8d:56:f8:70:a9:a4:ab:74:b5:59:03:98:db:a0:
                    34:f2:88:1b:84:a0:48:1e:63:e3:c8:81:15:1d:8f:
                    e2:28:5d:72:c8:cc:90:3c:cf:d6:e9:59:c2:3a:ac:
                    53:be:a6:8f:24:50:12:f6:1b:e0:d9:b8:27:f9:e0:
                    3e:d0:da:ae:c3:8d:16:6c:35:ef:39:69:28:fa:d3:
                    3a:62:6a:10:6b:dd:e0:15:f9:1a:73:42:d0:fb:cc:
                    aa:d8:0f:70:fb:1f:ff:7d:86:9a:89:29:98:cd:bc:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:4E:28:87:5A:5F:CD:DF:B0:3D:BF:A0:1B:47:8B:BE:59:C6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c7a0cca0-a2a6-3783-aa5d-a5f82f339a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:b7:c1:58:a2:3c:f9:5a:39:5c:a4:25:b4:0d:6e:ab:17:
         f9:aa:c5:a3:25:cd:6a:c8:c7:a3:db:1f:ac:93:a4:49:90:e6:
         6b:0a:b7:22:9c:16:20:35:48:6b:93:41:0c:00:1c:f6:9f:ab:
         23:90:08:49:9d:78:86:62:6a:d1:f0:10:80:4a:f2:cf:89:72:
         7a:4a:17:3f:ab:ac:fd:bc:cf:a9:ec:a0:36:33:a7:7c:08:b3:
         bf:2d:e1:58:25:cd:96:b3:65:eb:6a:ad:c2:78:7f:b3:96:f8:
         b6:17:6f:61:61:3f:bc:6e:cc:63:18:ea:22:77:9d:24:6f:b5:
         d1:65:81:b3:41:e7:be:32:0f:bd:fb:ab:23:15:47:4b:1c:c1:
         0d:16:e1:ae:7a:62:5c:1d:50:2c:34:8d:93:59:b5:3f:63:1b:
         fc:f0:a1:55:fe:f2:a1:70:f0:9a:06:cc:5c:3b:17:95:36:c4:
         78:5e:61:a7:d5:a3:1a:36:e6:69:3c:a1:16:5f:37:15:0b:f6:
         ee:14:8f:80:c7:02:50:b3:79:0d:32:64:da:e1:05:b3:cc:e8:
         46:30:62:86:a7:f7:eb:2a:42:b8:78:58:0a:ed:50:39:ba:01:
         02:1b:da:8c:2e:62:e2:48:01:fa:c9:ad:54:05:a6:73:7d:8a:
         8b:fa:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:20 2024 by rpki-client on console-fra.rpki-client.org