Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa
File:                     b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json)
Hash identifier:          ZPz6FISC8fYU0IApk581d4yiPhADXHlHP/TqapQsewY=
Subject key identifier:   DD:99:E9:03:A3:B0:19:63:47:8F:0B:D6:41:13:9F:8A:12:EC:08:66
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858458C6DD2862B1EBEB56862A680
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     399629
IP address blocks:        193.149.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d2:86:2b:1e:be:b5:68:62:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=03a1e4e5-1a75-4128-aff6-6ace65cc39ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:87:48:63:5e:d7:cd:6a:9b:2f:37:3d:80:
                    42:44:fd:30:a3:b9:dc:3e:93:84:81:c5:ae:79:bd:
                    72:71:77:ae:34:fc:aa:e4:49:bf:e0:18:6b:e8:ee:
                    b7:23:6d:ac:d1:69:c8:c4:e7:f1:c0:5b:cc:3b:54:
                    c8:65:bf:e4:aa:e2:2d:85:dd:70:56:89:16:7a:78:
                    6c:1c:c5:d7:96:36:f1:56:8d:8f:fc:44:9f:77:78:
                    6d:e5:15:7c:5d:3b:36:e0:fc:c6:34:76:3b:18:f6:
                    ec:59:21:fe:df:99:09:8e:02:6f:84:07:fa:ad:71:
                    7e:a9:dc:be:6c:b4:fb:65:75:72:47:e8:f7:9c:24:
                    a7:26:c9:20:30:3c:31:fb:71:5c:e2:b6:c5:ba:f6:
                    b5:1b:db:79:4e:e3:52:1d:2d:c9:10:3d:b4:0f:fc:
                    c4:16:a5:66:26:87:1a:bd:30:69:e5:a3:89:f6:19:
                    a5:dd:02:9b:2e:be:c0:3c:0e:0b:08:aa:b8:2a:52:
                    90:3b:45:e3:48:b0:9b:4c:9d:db:53:28:e9:8e:8b:
                    67:b6:b0:0b:c7:92:fb:96:5a:d5:42:53:99:2e:10:
                    5f:3d:a8:88:86:52:ca:81:95:4d:f6:03:57:34:f9:
                    d6:52:cf:c5:36:33:c0:3b:66:d4:ff:3a:8a:0c:0c:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:E9:03:A3:B0:19:63:47:8F:0B:D6:41:13:9F:8A:12:EC:08:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:03:d1:fb:13:6a:6a:f3:57:97:05:82:bd:08:e1:17:d9:d1:
         2d:20:3a:e1:ad:0e:71:0c:f8:34:95:3e:f6:bd:70:56:81:57:
         7c:52:28:8f:66:32:f2:26:1a:63:e8:7e:fe:c7:d7:c3:b1:f5:
         6b:05:da:3c:09:42:65:57:57:89:9f:b8:8e:90:12:1b:54:0e:
         2f:61:43:f4:52:cd:d5:a5:9f:54:51:89:1f:ab:c7:4d:1c:17:
         7b:8b:86:77:58:aa:f6:66:52:ac:a9:fe:ed:d5:37:45:8f:80:
         a0:21:16:28:b2:5a:3a:11:df:42:75:60:91:15:fd:bc:1e:77:
         62:49:f8:11:f5:ba:49:d1:39:50:19:9d:8b:af:8b:2d:e3:71:
         74:eb:a2:79:00:6c:40:6e:c3:d8:e9:ec:db:87:86:8f:4d:ff:
         83:ea:b9:a5:b3:70:4b:01:7b:e1:2a:30:6d:11:0c:be:b6:9a:
         8a:d0:25:70:a9:4e:a0:22:d0:1b:08:01:22:96:12:9a:93:e3:
         64:62:b6:36:df:d2:f9:fb:8d:b3:c9:cf:f6:83:50:16:ec:ce:
         64:48:77:07:4e:8b:c8:90:6a:dd:bf:ae:95:38:42:11:c4:1b:
         d1:aa:9d:ee:ee:0c:d2:e4:40:c4:a2:60:e8:2a:af:e2:f1:75:
         81:40:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:37:29 2024 by rpki-client on console-fra.rpki-client.org