Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa
File:                     37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa (raw, json)
Hash identifier:          qPlKK82pMwE+KyhVwEeS0u6CSIb6ppaACdtax+TPzNI=
Subject key identifier:   D6:86:4A:7B:E1:19:9F:41:0A:B6:65:AD:67:66:87:5E:EB:0D:19:AA
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F432858458C6DCE41CED66A55613D57C0
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     62659
IP address blocks:        192.0.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:ce:41:ce:d6:6a:55:61:3d:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=88219fc1-91a9-4378-97e1-4b52b6a438e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:71:1e:7d:b8:dd:ee:f8:60:32:ca:8e:be:
                    66:8c:f2:06:b0:33:9b:38:c6:c7:68:8c:f0:d7:7c:
                    95:48:82:15:1d:90:eb:c9:99:35:1c:60:c0:67:ed:
                    92:9c:b7:45:a5:3d:d9:d0:fe:4e:2b:21:d2:5b:83:
                    c8:e4:db:56:11:3a:be:01:6c:9e:72:cb:cd:7a:f0:
                    71:e8:5c:43:e8:b4:88:34:52:6c:28:09:bc:a2:8d:
                    b2:9c:f0:23:14:6e:34:d5:27:f3:e6:74:4f:ca:69:
                    8c:ec:fe:03:39:2b:f1:18:7a:0b:93:94:02:ef:ed:
                    81:9f:d2:13:d5:e1:a4:e0:bc:6e:8a:2a:f5:80:46:
                    4b:07:40:67:2d:d6:18:0a:a8:b3:64:4d:ee:ed:bd:
                    62:9e:29:1c:e5:bd:78:9c:3c:f5:a2:53:29:07:2a:
                    0f:84:ea:7d:47:d0:b3:14:b1:b5:c0:9f:fe:b5:99:
                    b6:db:07:e5:7e:46:10:da:ca:80:d4:1e:62:00:6b:
                    0c:0a:25:b4:a9:84:d3:79:ec:2f:82:c3:e6:64:7e:
                    9f:b2:d3:c8:41:76:c6:62:bf:a1:9b:3e:96:19:89:
                    00:11:28:c3:2d:f2:97:20:2b:cc:e3:18:d3:ae:18:
                    cc:b4:da:5c:6a:90:2e:74:35:97:b5:c7:c8:8c:fe:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:4A:7B:E1:19:9F:41:0A:B6:65:AD:67:66:87:5E:EB:0D:19:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ec:51:b1:2a:4c:25:1e:03:48:ed:b7:a9:d2:a5:49:42:4c:
         cf:87:bd:e2:1b:30:a4:de:0a:15:57:f9:fc:c9:0c:f9:dd:b6:
         0e:c3:e5:ee:39:3a:b8:10:cd:3a:96:90:a5:7f:0f:90:2b:f4:
         73:70:3a:3a:58:6a:e2:00:28:9b:ca:c9:88:fa:78:1f:53:81:
         f0:3c:40:ac:e4:17:41:32:c1:b0:0c:49:31:b1:a8:23:6f:dc:
         81:89:e5:6f:25:3d:0e:e4:ac:9a:c6:b1:89:df:13:a2:5b:e7:
         4f:14:80:e3:7b:c6:e3:22:4c:2d:4e:15:21:5b:31:89:6b:c8:
         c2:92:91:6c:02:94:1f:57:21:ca:df:6f:61:15:1f:d2:8c:c9:
         4d:0e:6f:21:cf:97:25:0e:62:2d:b4:5f:dc:38:96:dd:23:86:
         f2:8c:eb:66:5e:19:14:e7:7a:b5:0a:cc:63:80:f8:8f:b5:ba:
         65:99:0e:c6:73:d3:22:b9:52:f1:47:85:1f:24:e6:cf:2e:28:
         b8:3b:7d:d8:ce:17:bf:13:85:45:8c:27:57:4c:a1:85:86:45:
         4d:56:4f:64:46:14:f5:32:7b:ac:a9:6c:b6:c0:be:2b:81:95:
         6d:d9:00:96:05:da:e3:8c:f1:f6:2a:b2:0c:c9:7e:6c:29:ee:
         4d:55:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:57:11 2024 by rpki-client on console-ams.rpki-client.org