Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
File:                     249ec9c1-aae0-3b16-a897-6f80b435a876.roa (raw, json)
Hash identifier:          sXiWG9cFckaVyJbJO8XnFbh8xTC2cXIiseDQeXten4I=
Subject key identifier:   03:0A:3A:0F:CC:C1:0B:9D:ED:AE:C9:62:5B:B9:3E:B1:90:76:A4:11
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F43285845254040F0E070221ACA6F4B00
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        192.0.55.0/24 maxlen: 24
                          192.0.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:40:f0:e0:70:22:1a:ca:6f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=35d74418-4458-4d5e-ab81-8d806f8186fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:3b:8e:21:4b:f7:df:cb:66:fc:c3:bd:71:
                    f8:bd:50:b6:dd:13:58:0e:c1:0a:56:a8:42:f0:0c:
                    a7:93:2d:3f:94:b6:aa:9d:43:a6:02:78:58:2a:97:
                    2c:04:51:0b:48:98:2f:20:f4:75:e0:1b:70:57:79:
                    fe:23:b0:8d:12:ec:00:c5:8e:e7:3d:92:97:87:35:
                    40:06:9b:c3:0e:ef:5d:c6:af:1a:8a:45:5f:7b:dc:
                    4f:f2:76:17:b4:ca:8e:c0:20:a4:a9:1d:94:4c:ad:
                    17:21:66:50:7d:9d:30:a0:30:98:05:12:5b:b7:00:
                    54:39:06:47:95:35:b6:a9:c3:ac:07:bb:65:f8:a2:
                    6b:78:48:06:2c:77:73:b8:04:30:00:6f:15:1e:9a:
                    8a:9e:25:2b:8b:dd:6e:a7:63:05:22:09:ce:4e:68:
                    55:8b:32:1d:ee:b0:57:2d:87:fd:7b:ba:15:4e:7f:
                    d4:7c:8e:bc:a7:5a:3f:30:af:cb:69:70:2d:76:39:
                    38:9d:ca:38:2f:27:01:f7:20:50:77:cf:6b:1c:54:
                    2b:15:00:20:48:d4:c6:47:99:b2:2a:18:6b:30:2e:
                    4f:ae:cc:c5:71:73:6d:a8:b4:23:e1:80:c3:4a:c5:
                    7a:bf:52:92:ce:bc:f7:74:ac:cb:c2:62:be:67:4f:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:3A:0F:CC:C1:0B:9D:ED:AE:C9:62:5B:B9:3E:B1:90:76:A4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.55.0/24
                  192.0.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:25:9c:50:4e:a4:04:c3:7e:aa:01:4b:80:54:33:1f:4f:50:
         57:22:0b:31:df:3d:1a:11:15:22:f3:3b:e2:14:0d:af:79:ad:
         8f:df:c2:d0:e3:83:e2:19:5e:45:93:ae:84:31:b4:58:6b:2f:
         3a:b4:b6:de:2b:ec:09:4b:fd:7e:a9:22:c8:55:9e:c8:a7:66:
         2b:28:c8:ff:ab:fc:68:fd:db:8a:82:e6:bd:be:b1:b3:84:6c:
         8e:f8:82:bf:07:77:4f:bd:82:ad:97:77:2e:6b:a1:8a:9d:62:
         df:3f:c1:cd:34:ac:21:95:f1:02:29:a4:01:69:ba:55:e1:0d:
         62:c7:2c:ad:83:4c:c1:e5:75:d7:04:d2:47:f3:2d:56:f7:e8:
         46:36:63:9b:1e:23:b9:01:ad:d6:82:29:f1:d0:8a:16:ee:14:
         bb:b6:6b:1a:5f:23:35:7d:01:80:8f:89:81:dc:ae:91:ea:15:
         82:da:c2:d5:1a:dd:48:6b:72:15:90:3c:c5:b8:0a:75:99:0c:
         74:0f:04:0c:48:8d:7b:d1:d6:af:ee:31:64:e2:08:cc:03:bb:
         74:c7:63:ee:72:78:c2:a6:87:f3:ab:5d:18:1f:87:31:ea:93:
         5c:5d:bb:6b:40:6e:ca:b9:a1:fc:85:6c:b7:c9:39:68:1b:7c:
         73:8e:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:49 2024 by rpki-client on console-fra.rpki-client.org