Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d685f8f3-61a7-3730-9be6-68d338f2b961.roa
File:                     d685f8f3-61a7-3730-9be6-68d338f2b961.roa (raw, json)
Hash identifier:          8NGcPcsN69lgHRyizcu6PCIINONLLkrARRFbGK5c8TU=
Subject key identifier:   7E:58:56:A6:60:C1:FD:11:EA:23:1D:CF:34:A9:47:2C:2D:F8:85:F6
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F43285844F19AAC7898A8E19A81639220
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d685f8f3-61a7-3730-9be6-68d338f2b961.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     206092
IP address blocks:        192.101.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ac:78:98:a8:e1:9a:81:63:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=c3cf1aba-140c-4bd5-9bce-177f11ac2fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:c5:1f:e0:2c:79:2a:19:95:0e:1c:97:30:
                    d8:45:08:fa:89:ef:5e:b5:64:e9:c1:d5:d7:f1:84:
                    86:37:e9:d7:d4:b4:7c:cc:14:ea:02:dc:bf:75:4d:
                    c1:5e:04:b0:61:9d:63:79:61:81:21:97:f1:f6:61:
                    79:b8:ce:cc:53:c4:0c:ea:57:cf:4e:53:a4:ae:02:
                    49:74:8c:b4:de:8e:aa:6a:41:ab:c1:17:f9:b0:22:
                    e4:59:c2:61:cc:40:b5:3f:8e:b9:6d:5b:e8:36:1d:
                    78:44:92:69:81:67:52:a5:61:c0:84:a9:b4:0e:b3:
                    09:08:d2:e6:8e:04:f1:19:a2:90:06:62:a1:78:bf:
                    4b:8c:8c:a2:9d:27:17:aa:8c:63:8b:43:87:59:34:
                    bc:70:df:09:bc:24:a1:3e:0b:2a:6d:17:3f:8c:97:
                    77:d9:f3:49:b9:b8:5e:fd:a5:e8:6a:cb:85:57:75:
                    06:db:de:f9:fc:dc:ff:f5:86:f1:28:10:bf:fd:47:
                    64:f1:a7:9c:e0:fb:d8:89:0c:c5:3a:bc:54:8d:98:
                    a9:52:23:3a:91:c5:7c:20:f5:66:87:d6:78:bf:4c:
                    72:dc:e0:65:88:32:c9:b3:05:da:97:48:ee:bc:e8:
                    b4:3c:d3:6d:74:87:e5:a0:6f:81:84:1a:e3:6d:ae:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:56:A6:60:C1:FD:11:EA:23:1D:CF:34:A9:47:2C:2D:F8:85:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d685f8f3-61a7-3730-9be6-68d338f2b961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:20:bb:39:7a:24:48:81:79:76:09:c3:ee:59:b9:85:a8:
         33:df:9d:63:d5:8d:24:40:37:ab:1a:7e:15:0a:8a:be:88:fe:
         c1:b4:6b:72:95:91:e5:81:69:13:f8:32:22:73:0b:db:e2:03:
         2f:38:58:38:ce:e7:59:77:39:14:dc:49:79:a0:54:fc:7c:05:
         f1:fa:e1:b5:33:b8:83:76:d5:56:18:df:4e:00:1d:a0:f6:c1:
         d7:db:cb:89:1a:a6:29:8d:ee:5c:fe:87:08:ff:97:1b:1c:0d:
         2c:35:18:fd:9f:70:0e:4c:44:17:28:c9:2f:4e:0d:9b:3e:d7:
         76:8a:78:32:ac:3c:8a:de:64:84:11:1e:bc:39:45:62:7d:bf:
         b9:db:da:61:9b:ea:db:b9:18:0e:9b:fa:51:30:65:fb:da:b6:
         2a:80:11:57:83:4d:4f:ce:f8:e9:b0:7e:11:ac:a9:38:0d:1e:
         d3:53:9f:e1:fc:11:9d:1c:66:b7:84:99:7a:7c:4c:d6:15:d8:
         df:27:2e:5f:83:35:1b:64:40:aa:97:6f:01:b8:a5:a7:65:b2:
         2d:04:4f:65:d0:84:98:13:91:ca:f6:37:eb:40:cb:05:58:5d:
         99:2c:b7:9e:0b:9a:79:ba:08:d8:86:bd:44:15:89:9d:b9:8d:
         71:ba:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:32:52 2024 by rpki-client on console-fra.rpki-client.org