Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
File:                     81de4d19-de8b-37b4-889e-02591c2ce7e5.roa (raw, json)
Hash identifier:          P1PCXk9K0+Bm7cqQwPnCYvxgkCbO2t9B4NI/30wHqGI=
Subject key identifier:   7C:22:4B:75:1C:30:22:BA:D5:FC:97:A7:B7:30:DB:3F:16:8C:F1:99
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858420DAD8055FF5576FB4224A680
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
Signing time:             Tue 30 May 2023 13:00:19 +0000
ROA not before:           Tue 30 May 2023 13:00:19 +0000
ROA not after:            Mon 28 Aug 2023 13:00:19 +0000
asID:                     399629
IP address blocks:        193.149.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 May 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0d:ad:80:55:ff:55:76:fb:42:24:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: May 30 13:00:19 2023 GMT
            Not After : Aug 28 13:00:19 2023 GMT
        Subject: CN=389d74c1-4b5b-43b8-90d8-be11939e2284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:52:50:03:5c:f9:52:3a:e8:87:b1:27:6e:
                    c2:d5:d8:e6:50:f7:18:25:07:ff:c4:f4:b7:89:8f:
                    d0:d9:23:1a:37:4c:1a:f5:78:87:c5:7d:05:4e:63:
                    61:52:24:99:ee:50:10:43:b3:82:0e:51:87:eb:68:
                    6d:02:8a:33:6d:c9:db:c8:15:b8:6f:83:46:1a:3e:
                    66:dd:89:8e:a0:78:d2:ca:94:30:de:10:7e:8c:cf:
                    1f:b2:fa:ad:6a:b4:6c:9c:b5:c3:44:bc:be:bc:85:
                    23:e9:8d:3d:02:6a:7a:1e:df:fa:69:5d:16:4e:86:
                    99:0e:ff:f1:9d:79:b0:6a:50:78:89:87:ae:7e:22:
                    9a:9a:2f:6e:7b:b1:a5:fc:cd:b0:be:f5:2f:db:f6:
                    e5:8e:a0:67:6e:2e:d2:02:2c:66:6f:ad:a7:9d:89:
                    49:b7:33:99:a2:6b:92:bf:c7:56:84:3b:aa:a6:59:
                    e7:dc:fe:f7:75:3c:a9:5f:07:2e:6d:09:5d:e6:8c:
                    ff:3e:14:db:6f:f6:b3:57:2b:74:a7:0e:3c:43:3e:
                    89:a2:3b:80:a4:84:f5:a8:d8:ee:f0:3d:c5:57:8b:
                    89:df:e1:97:03:c7:ba:cc:d8:85:24:4c:e3:6d:99:
                    06:90:11:1a:8d:07:26:cf:f2:05:6b:8b:25:8e:b8:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:4B:75:1C:30:22:BA:D5:FC:97:A7:B7:30:DB:3F:16:8C:F1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:07:c4:ec:fa:5a:b1:51:1a:21:da:e0:40:f6:1b:90:b5:b4:
         0b:25:73:d9:57:fc:81:5e:b8:4f:9a:90:08:40:b8:bf:90:5a:
         01:00:62:ca:64:77:cb:ca:68:95:2b:39:54:7a:ce:72:55:b3:
         11:a8:ff:e3:03:87:f7:0b:74:c7:65:be:ad:b8:dd:00:85:40:
         1f:52:78:ac:27:44:f8:8f:9a:cf:49:e3:d4:5e:a1:da:47:78:
         47:af:42:65:c5:c1:ba:23:8c:a3:39:4b:dd:e1:e9:c2:64:33:
         3e:ad:26:58:b5:66:f6:f8:ec:a9:22:ef:f7:8e:0b:66:95:99:
         ae:6d:ef:39:12:e9:8f:c0:07:be:78:74:a8:f5:06:6b:da:d5:
         ad:4b:9a:8c:2a:b3:72:b5:b6:a8:b5:c5:de:90:c8:33:bc:05:
         0a:07:b6:d6:13:ff:ea:3b:ac:3e:ea:b9:85:b7:e2:4d:d4:d6:
         5d:f3:43:9c:b7:e1:fd:4c:76:cf:04:5d:5b:a2:2f:80:39:c5:
         2a:5e:14:c5:a5:8d:13:13:be:d6:a0:56:dc:e6:25:d8:11:aa:
         57:a1:5b:79:28:58:e6:c9:ac:9b:c9:23:eb:70:2a:5b:09:ba:
         23:46:74:66:93:ad:14:d1:97:36:57:da:d2:df:cb:0c:da:ed:
         df:cc:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 30 13:32:43 2023 by rpki-client on console-fra.rpki-client.org