Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/b0db3b0d-7222-3c6e-8ba8-dcf44759eeb2.roa
File:                     b0db3b0d-7222-3c6e-8ba8-dcf44759eeb2.roa (raw, json)
Hash identifier:          uHazSZ+Jeyy41KyQGy7g231rbG5uIvtsMfNMFjZZmFs=
Subject key identifier:   83:BF:6E:FF:1B:83:02:B1:40:ED:82:52:3A:7B:81:9C:C5:32:3C:3C
Certificate issuer:       /CN=5f7f12e8-ed36-4f33-9497-859edb798800
Certificate serial:       010D0C9F43285845840DC40A9557D8A34AE21D80
Authority key identifier: C7:2D:E6:0D:CF:1D:FD:CA:88:86:D1:8D:EC:41:17:8C:0D:58:AD:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/b0db3b0d-7222-3c6e-8ba8-dcf44759eeb2.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16826
IP address blocks:        198.148.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/5f7f12e8-ed36-4f33-9497-859edb798800.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/5f7f12e8-ed36-4f33-9497-859edb798800.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c4:0a:95:57:d8:a3:4a:e2:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f12e8-ed36-4f33-9497-859edb798800
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=8ee90710-49f1-43d9-967a-63f556b33803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:e9:57:ee:dd:21:76:ac:5d:4d:31:a5:f9:
                    98:ce:26:8b:66:b6:08:50:69:d8:42:8e:90:f5:61:
                    9a:2e:4f:c8:cd:5b:1a:95:f9:2e:2e:8f:61:d8:d9:
                    17:3b:8b:24:19:c2:12:01:69:22:ca:26:a5:5c:6b:
                    5d:db:4b:dd:8d:9f:44:ce:1e:5a:09:03:29:cf:c8:
                    b9:19:d1:59:37:fc:f8:e7:81:77:76:7b:24:c4:c3:
                    db:6d:c5:88:86:24:89:50:15:6e:97:48:bf:51:71:
                    38:14:60:c3:6e:fb:7e:d8:98:a1:6c:16:27:d0:d9:
                    e0:b2:5b:1d:2e:09:70:77:25:d4:54:75:e6:6b:31:
                    09:d1:d5:f5:1f:c4:41:6c:07:23:b4:75:33:a3:38:
                    7f:53:27:84:2c:cd:e7:20:53:22:d0:c7:4e:4c:93:
                    15:36:37:0a:b4:ea:d3:50:06:e1:0f:76:50:8b:8a:
                    7e:14:bf:d6:7b:ca:2c:aa:63:9e:43:f4:96:83:55:
                    15:85:99:20:97:24:81:ba:88:1e:33:b9:d1:a6:01:
                    92:02:e2:b7:4b:90:9f:38:85:28:0e:f1:43:23:38:
                    d6:b2:72:fc:dc:3f:ee:f4:2f:c4:fc:ec:ac:dd:bb:
                    18:5c:b3:f3:b8:58:a4:1c:a0:51:e2:63:23:56:a8:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:6E:FF:1B:83:02:B1:40:ED:82:52:3A:7B:81:9C:C5:32:3C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/b0db3b0d-7222-3c6e-8ba8-dcf44759eeb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800/5f7f12e8-ed36-4f33-9497-859edb798800.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2D:E6:0D:CF:1D:FD:CA:88:86:D1:8D:EC:41:17:8C:0D:58:AD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7f12e8-ed36-4f33-9497-859edb798800.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:07:6e:ad:7d:76:8e:1e:b4:8a:88:40:c1:cd:f5:74:e9:5d:
         19:07:74:c1:3d:bf:be:5b:6c:5e:61:a8:d3:1a:fd:ac:33:d3:
         86:27:70:c4:00:ff:20:ab:79:32:11:3c:b4:f4:d3:ed:02:6f:
         ca:01:58:2b:fc:45:45:bc:44:a9:0c:b1:53:4e:0f:8c:9e:00:
         8d:1c:59:51:61:48:02:91:f3:25:26:2b:be:54:3f:4d:f7:5b:
         3c:9c:9f:03:5e:73:94:e5:e9:26:be:ef:8a:75:5d:b6:8b:6d:
         98:19:4d:e6:e8:a6:fc:b9:61:8a:b6:c6:13:52:ba:fc:fd:14:
         1f:b1:06:6f:e1:26:63:62:a0:fc:58:20:d1:cd:49:60:ea:0d:
         91:36:bf:d7:16:aa:e6:0c:e6:b4:09:e8:9a:8f:07:59:6f:09:
         3b:d5:51:cb:cf:49:2c:d6:8a:46:e2:9c:27:ca:ed:a6:57:ee:
         5d:72:fe:73:49:6d:f7:70:20:11:63:d1:8e:e0:a1:fa:0a:74:
         d0:8e:88:52:87:83:5f:32:e4:66:c2:61:9c:0b:c2:23:de:12:
         72:9d:4e:24:59:19:b4:d5:29:56:68:6b:3c:42:56:97:9b:8c:
         60:a8:fc:13:ed:00:be:a2:e1:ce:79:69:4e:d7:6e:04:3b:ad:
         7b:d2:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:08:45 2024 by rpki-client on console-fra.rpki-client.org