Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
File:                     7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa (raw, json)
Hash identifier:          OiIhT+03AYrvC+fK5jL/a1iu3LBdNUlv9EBaBSROw/c=
Subject key identifier:   81:BC:1D:A3:54:34:99:92:78:68:9E:9A:23:0A:6E:D5:90:AB:3A:58
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDA4891686C9A5DB8EF00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        192.228.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:da:48:91:68:6c:9a:5d:b8:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=7b6b26f9-0b48-4540-b7f3-10ba6e02f36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:18:18:2f:b1:6e:57:7c:d9:a8:92:e2:36:
                    75:42:46:76:fe:05:87:61:5d:69:71:f7:17:0e:71:
                    49:9e:a9:c8:81:ad:ff:29:9b:62:3a:47:48:31:98:
                    b7:05:ad:92:f5:2e:15:93:9a:0b:c9:60:2a:60:e2:
                    6b:02:9e:c2:0f:03:33:0e:92:ad:e9:a3:75:67:b3:
                    40:f4:c3:c3:6e:19:d7:b3:53:27:56:5f:eb:8b:1f:
                    59:b5:36:3c:18:21:17:a1:b3:12:34:d6:1e:99:7d:
                    4b:28:66:e1:16:48:ad:14:51:c3:81:e2:86:a8:fd:
                    8a:16:11:e9:bb:d8:e6:aa:6e:cb:2d:54:fa:04:4d:
                    8a:21:d9:f4:bf:4b:51:88:d6:34:74:ae:7b:1d:56:
                    2c:c0:f7:7b:ad:6a:ed:0c:19:df:61:98:06:b5:4a:
                    25:ff:db:e3:65:cb:98:82:50:35:3d:31:4d:c7:93:
                    fd:24:72:ee:c6:c8:3f:83:65:56:56:29:0c:ab:c3:
                    c7:ed:72:16:df:25:bb:8a:bf:34:7c:b3:87:ad:b9:
                    52:f2:57:16:12:83:80:dc:05:0a:6c:1d:78:19:64:
                    db:9c:47:24:97:5a:82:b0:38:1c:ae:ca:42:e6:df:
                    9e:76:d3:de:0c:ce:b4:df:a0:67:87:51:10:93:92:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BC:1D:A3:54:34:99:92:78:68:9E:9A:23:0A:6E:D5:90:AB:3A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:c7:52:27:33:b9:fb:61:1e:95:73:03:a3:38:4c:90:38:
         1b:ae:18:b9:93:5b:8c:ac:c0:80:ea:3c:53:6e:63:86:ba:15:
         4a:7b:c5:98:f8:16:2e:be:4a:c5:e7:00:82:bd:6b:02:73:5a:
         93:73:8f:55:9c:0b:6a:90:58:8a:f2:0d:1a:09:2d:18:2b:85:
         e0:55:45:90:a0:39:e8:9e:48:ed:36:95:df:2e:03:4a:0c:27:
         68:cb:f7:69:29:1f:05:27:86:9f:33:dc:17:da:1f:e8:30:31:
         ee:95:5c:05:8b:dd:27:48:26:a5:d6:cf:ba:68:c7:75:04:a0:
         79:8f:41:dc:83:35:ec:6c:f4:9d:80:e5:50:f9:17:98:d8:ff:
         4e:ed:f3:dc:62:21:96:12:b1:b2:e3:f5:b2:ff:98:03:25:e3:
         92:1a:05:3f:c3:1f:92:ff:cb:0e:8b:c2:7f:00:78:2c:87:33:
         2d:2b:0c:c9:4d:64:40:22:f1:89:0e:0f:9b:57:65:6f:2d:df:
         a7:bb:cc:9e:99:ea:a1:d5:1b:68:aa:2f:c8:96:5c:0d:22:13:
         7f:03:2f:4d:f9:cd:a1:d5:46:cf:b0:79:32:7d:df:c2:73:31:
         c4:f5:88:78:22:76:2a:e7:53:34:c7:fe:c2:bb:d2:de:f4:cd:
         0e:b2:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:55 2024 by rpki-client on console-ams.rpki-client.org