Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
File:                     9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa (raw, json)
Hash identifier:          /7TdgeZAIYrFKrQ+EZFUW5F7JLMZ331+DRvyxu5wSEM=
Subject key identifier:   B1:4A:36:85:5F:C4:83:4A:83:DD:4E:ED:15:B8:1C:C1:9B:54:1B:50
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F43285844F19AAB5AEDA1CAC5E040F940
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     394625
IP address blocks:        185.240.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ab:5a:ed:a1:ca:c5:e0:40:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=a830e683-c352-4b44-9c50-e6630da57361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:ae:b4:67:51:ce:86:91:e2:4b:33:14:07:
                    f9:67:94:98:95:e6:b5:f2:4a:b8:ca:f1:73:2f:d8:
                    7f:d8:08:70:83:3c:14:77:56:6c:3c:d6:ef:75:67:
                    26:79:50:1e:b0:cc:05:8c:54:b8:f2:f4:b5:ed:f9:
                    27:31:13:09:28:e2:2a:ae:2e:61:2a:41:ad:a3:29:
                    d3:67:78:37:1c:f5:e9:6f:83:a2:a0:33:fc:e0:3e:
                    cd:3f:08:40:0b:96:26:75:2a:3e:38:91:35:94:26:
                    37:4b:f6:f3:77:82:a5:28:d9:ee:4d:f1:6d:2d:80:
                    1e:da:ed:fa:d3:63:77:bf:43:cd:80:e0:5d:80:c1:
                    68:54:37:50:7a:c8:8d:fa:80:b2:82:79:32:59:92:
                    72:55:e4:6c:8b:5b:de:d3:9f:67:ec:fe:77:da:7b:
                    2d:c3:83:0a:0f:3a:7a:4e:01:6c:37:a5:0d:77:0b:
                    ff:1f:bc:ee:eb:e8:50:c8:59:37:f2:1a:1d:81:74:
                    8a:64:2e:18:19:32:58:ec:26:07:c5:8b:9f:a1:2f:
                    4d:b3:a7:7e:dc:a7:c6:d1:1b:f7:5b:25:6f:c2:16:
                    0c:77:46:23:8f:94:96:9d:ee:16:1c:70:46:64:73:
                    c3:a1:0a:c5:77:00:9f:ac:e5:14:5c:33:7a:eb:bc:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:36:85:5F:C4:83:4A:83:DD:4E:ED:15:B8:1C:C1:9B:54:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:29:49:22:7e:f0:a5:8b:4f:6d:19:3e:b3:68:f5:bd:53:
         e9:73:8c:d5:5b:98:2c:92:e4:9d:3f:0f:cc:fe:5c:22:7c:81:
         aa:be:7b:7a:3c:6b:83:0e:ac:1e:59:5a:15:aa:f8:93:5b:f2:
         70:ea:46:94:b0:9a:e1:9d:06:4e:20:70:b0:e8:c4:d3:6f:21:
         d0:1e:24:c5:6e:38:74:07:f9:ad:23:8a:fd:ab:06:62:f8:5d:
         db:f5:70:e7:69:30:dc:7e:ba:b2:45:b6:85:31:1b:c0:dc:92:
         72:ae:1d:9b:7e:96:69:c8:05:c5:4e:00:da:a9:c9:56:30:70:
         b3:ae:b1:db:f9:c7:de:39:71:75:6f:1c:c1:30:7b:ed:50:06:
         1a:de:41:20:0e:bd:fb:ac:25:6b:d8:b8:22:2d:bb:00:e8:e4:
         f1:7e:c9:6b:4d:22:b0:52:15:fb:fc:6c:b2:e7:21:bb:75:00:
         5e:9a:32:35:54:4c:01:db:3e:ea:03:11:da:da:6d:93:ba:f9:
         be:d9:94:aa:3b:5a:1b:fc:91:53:83:bf:22:b6:8f:8c:0f:6f:
         2f:3b:52:e1:6a:88:50:ad:00:2d:23:6e:61:33:a3:33:d6:93:
         c9:4b:be:25:ef:15:14:53:58:11:19:a9:01:51:0b:04:e5:8e:
         28:21:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:07 2024 by rpki-client on console-ams.rpki-client.org