Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
File:                     6bb9aaee-b794-32ef-9cbe-5db764601630.roa (raw, json)
Hash identifier:          Vq7r4gO0Phf93i3L6pFqgwkLu7sqJKF+eB/Sonr2xfU=
Subject key identifier:   F5:06:6D:EE:E8:5F:4B:3E:AC:91:C1:6F:28:57:3F:A6:B3:7B:AF:77
Certificate issuer:       /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial:       010D0C9F432858456F1DC62025F9C76AB58E1880
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        192.190.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c6:20:25:f9:c7:6a:b5:8e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=ebedfd46-5c1d-4d15-bdb4-dcf7419bb9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:04:8d:ef:99:7a:31:79:a8:5c:03:14:ba:54:
                    ba:30:0b:63:c9:5f:ca:83:0a:7a:b5:17:37:5c:f3:
                    7a:66:24:7d:53:5c:0b:95:fc:7c:df:17:c8:1d:32:
                    0d:87:c8:6c:67:65:6b:97:b9:86:9e:6a:b6:f7:cc:
                    d5:95:c3:ba:54:57:87:af:64:95:6d:af:91:47:86:
                    1d:ff:05:9a:7b:26:51:83:de:42:2f:a2:92:e6:fe:
                    4b:a8:b6:ec:8f:4d:8c:55:82:4d:a6:34:1f:5a:43:
                    bf:dc:20:e8:ae:c8:bf:2e:e7:30:73:e6:f2:1b:9b:
                    a6:07:c1:51:3f:e4:ee:af:32:0b:9c:25:a0:11:76:
                    fd:91:17:c8:f8:d3:ec:61:0d:55:eb:70:e4:e5:86:
                    e2:c6:e1:bc:0c:90:27:13:a0:06:3d:06:46:29:50:
                    ef:1e:13:89:0c:1f:58:e2:ae:d5:4e:af:35:f1:fc:
                    50:bd:ea:17:f2:28:bd:42:80:38:63:ef:e3:45:d3:
                    93:40:e1:a1:82:e2:7e:39:39:74:0e:02:c6:c9:6b:
                    df:1f:6c:4e:d7:0d:e4:9e:c4:3f:0e:e3:01:1d:2e:
                    7b:4a:30:b4:60:1f:e3:65:ba:0d:ff:70:38:34:2c:
                    e5:a4:93:1b:99:f5:d6:8b:fb:4f:0d:98:7f:e0:47:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:6D:EE:E8:5F:4B:3E:AC:91:C1:6F:28:57:3F:A6:B3:7B:AF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl

            X509v3 Authority Key Identifier:
                keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c6:ae:a8:a4:e7:be:ce:ed:f5:78:ab:e4:b4:b0:0d:da:59:
         8e:83:d5:8b:c8:a9:1d:3f:82:ec:8d:b8:7d:b8:cd:d9:4d:58:
         31:ef:cd:c3:dd:53:11:70:96:9e:50:17:8d:53:15:e4:7b:16:
         91:9e:da:7b:f8:03:ac:c0:1a:26:c8:e2:41:39:ee:f6:29:93:
         8b:b5:f7:29:13:56:2d:12:5e:e5:45:02:68:05:71:e9:40:d7:
         e9:a0:ed:1a:41:ec:cb:07:7c:89:17:ab:d8:3c:50:7b:8a:05:
         8c:7a:8e:4d:38:5a:27:72:19:f0:56:31:4b:80:f3:94:c6:86:
         7a:4b:fd:f7:73:85:73:e3:bd:12:eb:04:9b:c3:c4:8c:3d:d8:
         c7:13:db:63:1b:5f:40:cc:ca:c8:1c:56:11:8c:43:eb:4b:d6:
         1c:1a:38:6a:86:0b:8f:a8:2d:f9:94:24:8b:95:23:dd:e4:20:
         6b:1c:38:f7:af:89:76:a7:ae:e9:54:ce:eb:71:40:f5:7a:aa:
         b8:9f:a1:b2:ba:c3:e1:a5:89:a3:7f:9c:ed:4a:72:11:70:20:
         70:58:8a:38:51:8c:9e:c6:9f:f5:ca:2a:96:d6:8d:c6:50:6c:
         65:dd:b9:fc:e4:f4:bb:7b:55:6b:d2:71:d3:fa:59:e7:3e:b2:
         92:47:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:32 2024 by rpki-client on console-fra.rpki-client.org