Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
File:                     1c801033-394b-322a-bebc-f2d3a732f913.roa (raw, json)
Hash identifier:          On0tZXmuOJnj87QxflHi+iODFZByPj5lH7Sz7iAds0I=
Subject key identifier:   19:C1:E8:FA:B4:E6:21:49:EA:A5:86:2D:8C:71:7E:06:86:73:1E:C7
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDA0D79FED59B29B5B700
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        192.158.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:da:0d:79:fe:d5:9b:29:b5:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=2904ac63-a1d7-4f64-a93c-3328dadeb7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:c8:5f:74:37:7f:22:49:18:75:10:c3:c4:
                    29:29:2f:7c:c2:a9:2e:38:20:85:c8:f1:58:74:53:
                    fd:9d:bb:d6:f7:b2:5c:82:f8:62:9e:e3:1e:15:f4:
                    27:e4:29:fa:1f:9d:01:55:a1:87:79:a8:0c:ba:ed:
                    9e:da:cd:22:71:18:7e:a0:c2:ec:35:61:4f:3a:ec:
                    d6:ef:60:f8:04:f0:e3:e7:13:43:80:e3:c1:da:5b:
                    67:9e:d3:08:4f:03:63:5b:16:0e:b1:f6:b1:ae:bb:
                    5f:b1:7c:80:e6:cf:f9:a1:65:fe:8d:a4:88:9c:ac:
                    42:e4:c1:34:e7:5b:e5:83:93:6a:95:d2:21:77:12:
                    91:17:4d:2e:89:58:f1:f2:58:67:ef:d2:21:59:45:
                    1e:e1:93:ef:15:20:a2:f7:df:76:82:d2:9c:ea:d0:
                    2f:f2:18:66:55:21:6c:86:25:93:5d:41:53:1f:ee:
                    0a:18:d9:24:21:a9:f7:b9:43:9f:58:37:c4:f2:c4:
                    d5:c5:17:16:6d:53:96:14:32:45:b5:ad:99:1c:02:
                    5f:2e:76:19:03:34:55:bd:24:14:e3:31:f5:25:01:
                    97:5d:70:2b:b5:18:57:9f:c6:90:f8:dd:9a:66:09:
                    59:ca:3c:37:3d:ad:a3:d6:6c:42:76:c1:77:f3:81:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:E8:FA:B4:E6:21:49:EA:A5:86:2D:8C:71:7E:06:86:73:1E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:b4:65:7c:8b:c0:99:0d:16:b7:9c:37:ea:d4:57:79:6f:
         82:83:e7:66:92:f1:f6:00:79:80:33:44:68:ff:c6:80:df:a3:
         a3:7a:80:fe:fa:e8:c3:8d:0f:92:55:a4:cf:da:01:fd:35:28:
         27:7c:43:3f:dc:68:4f:4d:7e:c3:c0:b8:de:8b:01:0e:e9:cc:
         46:13:05:df:03:cf:4b:4d:4b:0e:44:33:18:8b:12:37:4f:52:
         aa:5e:1a:d7:0d:15:6d:43:d0:40:7f:ce:0a:0d:f8:22:dc:02:
         3a:cb:0d:3f:22:6e:53:35:4a:a2:55:0d:4e:7d:ad:5c:8b:9c:
         e5:05:7d:b3:7a:7f:db:e0:8c:f9:d7:08:6c:9b:5c:e8:13:c6:
         b1:91:67:c1:4a:ee:c1:f4:9a:e1:50:ca:1d:5b:fa:2d:06:74:
         cd:18:52:bb:0e:66:8b:7f:ae:66:95:ea:a3:0f:cf:c1:8d:26:
         d6:cc:ef:dc:2d:a3:1a:09:dd:2b:4e:f0:95:a0:da:bb:ae:75:
         14:dd:ba:41:9d:03:7b:1e:9f:56:25:e3:aa:4c:8a:64:a5:d0:
         b1:c5:b3:ef:bd:3c:64:6c:39:b3:99:12:5d:1d:fc:f2:80:fc:
         41:7a:52:bb:f0:dd:b3:33:b5:a5:36:df:68:47:6a:84:54:60:
         64:fb:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:35:18 2024 by rpki-client on console-ams.rpki-client.org