Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
File:                     2fb2f41b-197f-3998-95c5-b00e388ae797.roa (raw, json)
Hash identifier:          oL2nWsFXDiqzaqTBK61VfIBRM8uPBkqECzVrAt2V4CE=
Subject key identifier:   FE:91:34:9C:BA:08:86:DB:58:B9:D5:93:35:3B:EE:4D:8D:6F:61:D4
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285844EA9FF13536E80CCAC5C38B80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     209181
IP address blocks:        198.145.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:f1:35:36:e8:0c:ca:c5:c3:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=18bd18c4-f7ef-4fba-84cf-f0d6856e60c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:a7:31:12:09:e5:d6:96:6b:27:71:9d:d1:
                    3e:45:ae:6c:bd:fb:ca:51:b7:8d:cd:06:8f:48:df:
                    fb:da:00:dd:12:01:62:11:31:6c:ce:f5:53:e1:00:
                    be:8a:2e:f6:f6:de:d0:32:d4:83:89:6f:5d:84:2f:
                    49:ef:dc:03:4b:2e:03:a9:02:4a:28:13:3a:18:84:
                    c7:4b:20:f8:9f:73:17:a5:8b:68:f0:8e:5d:95:65:
                    9a:de:11:16:c4:51:ac:97:0d:16:19:c4:a5:94:83:
                    3f:da:c2:41:ae:cc:45:9f:7b:d5:df:e7:cb:d8:9c:
                    39:5d:d5:46:6b:bc:37:bb:3c:e6:90:16:55:70:17:
                    68:90:56:c7:a5:52:57:fd:70:12:60:36:f7:f9:49:
                    91:5f:36:68:f8:dc:df:e1:40:a5:a4:56:8a:99:31:
                    da:53:75:bc:6a:12:a7:85:ad:36:f7:8f:97:9b:d6:
                    a1:d2:da:b8:11:40:8b:79:19:d9:4c:0f:e1:c0:3a:
                    00:84:5b:32:3c:d3:2b:d2:48:54:45:cf:bc:5a:46:
                    ad:6e:97:52:22:c2:f9:10:73:c1:c3:73:a0:08:42:
                    4b:be:46:5b:6b:21:fd:63:1b:8d:0c:0a:96:2f:2c:
                    b2:8f:c9:20:95:7f:28:9b:01:e5:ba:d6:81:58:7d:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:34:9C:BA:08:86:DB:58:B9:D5:93:35:3B:EE:4D:8D:6F:61:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:17:24:40:95:f3:30:05:26:e8:cd:21:93:99:5e:1e:b5:cf:
         ef:ae:0d:ff:6e:d7:f0:af:fc:ff:f1:54:8a:72:d9:20:1f:1b:
         97:1c:45:aa:09:63:d3:b6:5c:98:28:86:02:9b:0b:eb:a5:bb:
         63:2b:b8:41:8a:51:6d:36:c1:8e:10:62:0b:fe:f9:71:d7:e2:
         cb:22:be:c2:97:7f:cd:d7:4b:2e:9d:50:b3:c6:e0:56:54:b3:
         8c:35:93:a1:be:c4:94:f3:eb:be:f4:fb:85:aa:b0:ad:73:78:
         45:75:7d:57:15:b8:55:44:32:be:3b:de:f2:54:29:2c:02:c4:
         ef:a1:03:fe:3a:f2:13:d4:67:cc:9e:59:a3:cb:c2:8b:04:26:
         d7:e1:dc:11:93:8f:81:98:98:63:0f:e3:20:8a:8f:99:44:5e:
         29:39:a0:9d:4b:bf:ae:2d:6f:6c:f7:37:06:d9:8d:42:c9:a8:
         b2:97:69:6c:9a:63:a2:50:e0:38:b8:38:a6:c0:74:25:99:9a:
         52:08:64:75:5c:f1:12:a1:47:c1:7d:10:a2:43:33:21:36:c2:
         88:a4:83:39:67:6a:6c:df:85:f1:6a:35:21:1c:75:8b:52:a1:
         cc:c2:f8:ba:57:17:3e:8c:33:10:96:4a:6c:1c:02:f5:a8:4c:
         09:4a:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:26:09 2024 by rpki-client on console-fra.rpki-client.org