Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa
File:                     ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa (raw, json)
Hash identifier:          JIib+B59ajXECOaaZZUmeLcdV6B1pFcx9t8UzvvATwo=
Subject key identifier:   C0:38:E4:6B:CC:42:B7:52:9F:74:19:C3:AA:B8:86:05:A7:D8:77:20
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858458C6DCEDD6A494DB4A1A18480
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     399629
IP address blocks:        193.149.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:ce:dd:6a:49:4d:b4:a1:a1:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=2ad03b02-7970-4326-9e51-407d06b3f0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:45:b6:1f:68:93:f1:ec:1a:bb:88:65:67:
                    0f:b7:f0:e0:c5:7b:31:3e:6a:3e:85:4b:51:8c:7e:
                    f6:e9:9d:01:4e:2a:d6:11:be:2b:b2:20:41:f0:d1:
                    cc:f0:74:db:9e:81:f2:e6:5e:4f:16:fd:5b:17:ea:
                    0d:fb:b2:72:c7:e7:ea:1f:96:e6:a8:4d:bf:3d:5b:
                    4d:da:cf:e1:ba:0e:0e:a6:4a:15:21:6b:f2:f1:48:
                    08:c1:5d:30:4c:28:09:c5:87:69:de:b6:6b:ab:01:
                    9c:76:ce:ce:28:e5:57:d0:b9:b2:9f:83:45:32:24:
                    73:1d:ec:b7:e1:a3:82:a6:74:11:c2:16:74:b4:9e:
                    d0:2f:88:b1:59:ea:3d:40:c3:43:d9:11:04:b9:c5:
                    69:64:e4:a7:a8:91:27:fc:30:b2:c2:76:e9:f2:cf:
                    fc:bf:8f:ee:f3:0d:81:57:d4:a6:12:e4:3a:1d:2d:
                    0c:30:ba:91:c3:bf:c6:7e:71:44:7d:b3:e7:02:c9:
                    83:fc:54:3c:ef:10:e1:1c:47:5f:ab:d3:53:28:8a:
                    7e:92:87:2d:a7:5c:4d:93:c4:54:3b:38:d9:0c:f0:
                    43:d1:34:f8:be:c8:46:e9:a3:bc:20:5a:50:fd:99:
                    50:66:aa:7d:6c:f4:e0:97:38:8b:c0:17:30:27:82:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:38:E4:6B:CC:42:B7:52:9F:74:19:C3:AA:B8:86:05:A7:D8:77:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:cc:0a:68:bc:f6:60:5f:cb:db:cc:87:ab:21:e3:4f:9c:
         a4:ac:25:75:bf:5e:b0:1f:59:af:0e:5f:8b:35:25:04:2e:4a:
         5a:cf:67:19:86:a8:f0:b3:26:f9:90:12:8a:8f:17:32:c2:a3:
         ce:69:8a:1a:2a:83:c9:70:65:6a:de:36:9a:90:ec:17:de:1c:
         95:f3:6f:68:bd:48:de:d3:70:86:f5:8d:7e:4e:3b:0c:41:45:
         d8:a9:f6:8e:64:3f:71:6f:00:be:2b:6a:f8:c0:a2:95:d1:92:
         85:d2:59:1f:6f:75:ec:fd:c9:74:c2:fa:7f:e3:9b:56:1f:23:
         3a:d9:b3:d0:41:ad:ea:99:5e:2e:60:86:68:9f:f5:8d:86:83:
         d3:c0:4e:a5:27:7f:8c:aa:f1:9c:70:03:ca:48:e1:dd:97:6b:
         b6:b7:c9:c1:57:33:e0:db:8c:32:5d:3f:f0:72:de:71:84:a8:
         ad:14:47:a4:09:28:6b:f3:8d:53:74:70:78:47:ef:14:82:d3:
         d0:fd:ed:b3:b7:d2:29:c1:c4:b9:3d:f9:a8:0d:5b:18:10:52:
         b1:2b:4a:4c:ab:a4:2b:9a:c3:a5:8c:d7:c3:5c:ff:99:14:c0:
         3d:4d:7e:84:2a:9b:8b:db:f1:ba:ad:e0:72:26:aa:b5:74:98:
         2f:64:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:57:12 2024 by rpki-client on console-ams.rpki-client.org