Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa
File:                     d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa (raw, json)
Hash identifier:          y6eW91QX8W916ZOu0vvJGUzJqhtMIjtftQYXBKJ9izw=
Subject key identifier:   76:B3:65:76:05:57:69:9B:7F:19:E8:69:B6:C6:1D:72:55:53:38:6D
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F43285845025AD299F9E3BB121DE41B80
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     3561
IP address blocks:        185.123.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d2:99:f9:e3:bb:12:1d:e4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=0fa75d33-d0d8-4210-86b2-509d0a683cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:6c:53:f4:02:ac:bb:55:9a:20:d6:ab:fc:
                    2c:58:b6:ea:0f:4f:83:6a:4e:eb:a0:a8:65:95:0a:
                    34:2d:b8:a1:e8:ae:aa:c1:2c:0d:13:55:62:bd:49:
                    2c:70:15:a4:91:36:86:a7:cf:f4:d2:34:b8:d5:22:
                    82:b7:4d:98:6f:1d:62:94:2d:75:36:65:b5:01:58:
                    13:91:ba:85:20:e7:58:a1:22:a5:aa:ce:65:2b:79:
                    a9:de:bc:ae:be:f2:75:8b:2b:79:ad:23:00:45:0f:
                    4a:85:be:88:57:d7:1a:bb:c4:a2:31:3b:f3:24:a4:
                    bb:90:f7:76:40:95:be:45:1c:b8:ef:1a:4d:c5:c0:
                    ac:50:09:c1:71:70:fc:d8:4d:b5:75:ff:7b:db:5b:
                    8e:a2:df:a8:ff:e3:71:3f:63:fb:1e:50:15:ec:b8:
                    05:ad:e0:e6:dd:8f:c9:9f:f6:24:7e:2a:05:92:bd:
                    36:e8:a5:88:78:64:79:3d:55:12:61:5a:05:7d:c2:
                    61:53:33:1c:36:7a:c0:53:84:95:e6:de:08:1c:83:
                    68:e7:ad:98:72:04:6a:a7:dc:57:ed:3f:a8:9f:e7:
                    46:c0:5c:0a:c9:dc:6d:3d:3a:6c:7b:f1:43:1c:c5:
                    f0:b3:de:84:87:1d:8a:89:07:96:d5:1d:82:e2:20:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:65:76:05:57:69:9B:7F:19:E8:69:B6:C6:1D:72:55:53:38:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:34:b4:28:77:bb:ea:f7:22:62:04:04:20:65:20:58:be:e1:
         53:f5:24:5f:7a:13:37:6a:a9:8b:8e:71:06:32:1f:f8:45:96:
         c6:ae:68:08:41:ce:c2:6c:dc:3e:9d:cc:45:8a:43:c1:6a:6b:
         d4:94:21:45:c5:e4:7e:cb:0c:7e:c0:aa:00:68:ea:61:a5:e7:
         f6:3f:98:69:c6:df:bf:58:e2:99:bb:73:b2:e0:f2:9c:2b:56:
         fa:cb:df:f6:b0:3a:ff:8d:9d:92:30:36:cb:9d:54:95:85:13:
         f1:ab:d3:6d:c5:a9:b5:ff:99:6d:7d:a9:5c:ee:d7:64:37:1d:
         d9:91:12:2d:da:52:70:5d:b1:43:3a:60:7b:de:2a:39:e2:1c:
         64:d3:39:0a:48:ba:9d:0b:d1:4f:4a:0e:a6:2f:1c:c9:dd:e0:
         61:4b:be:4d:bd:4b:5b:f0:36:5e:cd:aa:5c:ca:b7:34:d3:32:
         f8:75:6b:64:00:4d:0a:6f:f5:87:36:ca:d1:b6:a2:bd:d3:f1:
         95:02:8e:a7:48:aa:e1:6e:76:10:aa:b0:27:d6:79:dc:bd:de:
         fb:3c:0f:fc:90:bb:66:80:a1:26:e7:eb:97:18:12:32:54:9d:
         73:1b:d4:2b:cb:14:6d:1b:f6:33:e5:00:df:23:75:13:bd:6c:
         b3:8e:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:26:50 2024 by rpki-client on console-fra.rpki-client.org