Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
File:                     123983f4-735a-3daa-866c-0058ff4204c9.roa (raw, json)
Hash identifier:          mZahiHyBZwb+U7GhRTSqyL6nXfdkFTniWjyIU53r9DU=
Subject key identifier:   57:69:09:F5:EB:82:24:AF:EF:EB:FB:2D:13:94:51:38:85:F2:89:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2DE34390B2EEDDC3CFC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     17359
IP address blocks:        199.255.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:de:34:39:0b:2e:ed:dc:3c:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=85ad3d7f-b03b-4782-948e-c28cdc9a2368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:cf:63:6f:75:48:be:d2:e1:d9:9f:7e:72:
                    be:d9:3e:5c:f3:ab:6b:0b:e6:f7:84:93:9a:1c:80:
                    c4:2d:f1:e7:af:e4:05:91:80:9c:c1:e8:3c:6c:bf:
                    99:24:d6:63:90:27:76:4b:eb:2e:23:58:a1:f5:fa:
                    a4:de:95:b2:51:b1:8e:2d:94:2d:c4:fb:cb:61:f3:
                    29:79:d1:14:36:0b:46:25:b6:a4:4d:f9:eb:99:b8:
                    29:ff:2b:5b:9c:fc:5a:a1:22:3c:06:62:02:cd:7f:
                    b0:db:c7:9f:15:66:60:c7:71:0f:e0:2d:77:b1:58:
                    0e:30:90:1a:6c:ab:dc:76:72:36:b2:b8:41:af:3d:
                    a7:91:97:48:40:59:b1:ee:9a:dc:1e:27:9e:38:88:
                    a2:c3:5e:0f:84:b6:6c:29:59:73:4c:39:59:55:f7:
                    48:ba:f1:20:be:9a:e9:4d:bc:90:19:89:bf:18:76:
                    cc:31:db:53:4e:14:d5:4d:ad:60:4a:ba:e4:51:27:
                    f3:c1:f3:3e:ef:bd:6d:1f:66:1b:a9:05:53:07:f9:
                    67:e4:e4:20:30:ed:82:b8:c5:74:5f:c1:a0:70:0c:
                    24:07:53:89:84:f7:a6:05:6d:88:ee:88:8f:52:05:
                    94:e2:d1:a3:c2:39:36:cb:30:25:04:a2:be:bc:f3:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:09:F5:EB:82:24:AF:EF:EB:FB:2D:13:94:51:38:85:F2:89:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:95:17:53:fe:64:44:5a:19:70:df:6d:dc:4a:04:c9:e2:0e:
         c0:ff:5e:ef:25:c8:73:20:1e:56:ad:82:59:88:f1:26:f3:c0:
         80:7f:4b:9e:4f:50:1a:78:02:72:79:89:e0:48:73:15:11:e9:
         6e:af:0b:f8:c2:ac:88:8b:bf:40:7b:3b:78:34:53:0c:2e:c6:
         44:68:08:59:51:ea:ea:af:06:be:31:9e:8f:70:3b:f5:34:76:
         25:78:13:bb:e9:50:73:a4:dd:24:75:4c:3d:be:34:ff:22:37:
         9d:3a:5c:c1:22:c1:57:99:42:1b:67:01:5d:0e:b2:3a:6c:8e:
         c9:f9:d3:bf:06:45:77:70:03:f5:f2:ab:7a:07:7e:79:f7:1f:
         63:c5:47:93:5c:8b:ce:70:b2:3b:a9:1d:0f:3a:de:ce:2c:ec:
         8c:4f:99:1d:b9:50:f9:3c:0b:9f:f3:f5:44:1b:06:e9:48:30:
         41:63:39:9a:06:70:91:d8:2b:22:3d:31:b3:aa:8a:9d:08:4a:
         0b:c9:1f:64:b7:34:22:7e:84:a8:90:41:7c:55:0d:26:e3:ba:
         18:4d:ec:10:3a:56:13:46:08:55:f2:3e:37:ba:d0:df:03:1f:
         40:18:f8:10:39:a2:c5:02:f0:62:83:c6:b4:65:7a:ed:b3:20:
         19:79:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org