Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9f628fed-3929-3df9-94ab-fc12cdb44cef.roa
File:                     9f628fed-3929-3df9-94ab-fc12cdb44cef.roa (raw, json)
Hash identifier:          m7NoDCFQtBmIK2eUArVkLx/H67W/LB+q43aW76vwGdo=
Subject key identifier:   0E:8D:6F:0A:0C:1C:B3:D2:90:C7:91:D4:B1:B3:1B:3C:05:3D:D9:07
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285844FCC56776301325FF08B3C200
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9f628fed-3929-3df9-94ab-fc12cdb44cef.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     9009
IP address blocks:        198.145.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:67:76:30:13:25:ff:08:b3:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=f03495b1-aeda-4ee2-ad69-9574e4d025ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:88:4f:ba:62:8d:30:9b:38:3e:2d:37:10:
                    fa:6e:a8:3b:36:04:88:14:3c:c8:e6:7a:87:9f:9b:
                    d4:71:a2:dd:a9:c2:53:15:1e:69:4d:b0:a1:0b:2a:
                    d9:e8:08:aa:06:f7:9d:73:d7:33:59:49:9c:b7:6c:
                    a8:6c:e4:89:1a:e7:9c:96:d3:52:1d:81:93:4a:9a:
                    99:e7:32:d2:90:1e:25:d6:2c:8c:8a:7e:2a:f6:37:
                    f9:3d:c6:46:b4:76:bc:09:0e:6b:96:6e:cf:67:e3:
                    14:eb:6b:0c:01:e8:03:a5:f7:fb:9b:b2:de:7f:42:
                    d4:41:7e:60:4c:b4:53:17:a4:fc:39:0b:2d:e8:f1:
                    96:d8:db:49:a7:46:e7:df:26:83:4d:69:7d:2e:e4:
                    4e:3e:80:c4:79:f7:91:b3:c4:02:90:e4:cd:a3:3c:
                    5b:d8:25:b3:24:a4:09:0a:cd:07:be:01:5e:a2:5c:
                    f1:42:08:95:bc:f5:cc:78:ea:e3:bc:81:8f:c4:00:
                    c2:5e:83:5a:c3:f7:81:01:f1:60:1f:71:23:70:da:
                    86:17:f7:8d:08:ca:ee:52:81:fb:17:1a:ab:c8:fe:
                    3a:3a:7d:da:23:dc:eb:09:7c:16:c8:b1:28:24:ef:
                    d3:80:e9:07:58:ef:c4:a2:9d:3d:c6:28:a0:36:e8:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:6F:0A:0C:1C:B3:D2:90:C7:91:D4:B1:B3:1B:3C:05:3D:D9:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9f628fed-3929-3df9-94ab-fc12cdb44cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:72:82:9c:1c:77:87:25:32:9c:0a:ec:23:13:8a:ad:de:78:
         f2:04:3d:e2:d4:44:29:58:8e:e4:01:a2:de:74:db:af:74:fc:
         3f:d2:75:de:33:df:30:36:de:40:7d:21:ee:db:ec:9d:0c:c5:
         94:21:a1:6a:a4:5e:94:c4:26:59:f5:87:90:38:5c:9a:54:11:
         ff:02:e5:bb:fc:c0:1e:8d:20:66:8c:b5:b3:93:d3:69:8c:2d:
         8c:28:bd:88:a2:b0:fb:07:53:ea:20:1a:26:01:a5:67:48:09:
         20:e6:8a:79:c6:18:b4:d5:dc:7c:ea:0b:59:d3:f6:32:fc:a1:
         a3:4c:dc:91:c6:08:ec:e5:ed:8d:66:c5:d2:fe:b9:4d:1c:fb:
         6f:77:b6:5d:70:31:50:2d:d3:ee:e4:90:9d:5d:27:d9:9d:71:
         2e:56:a0:d8:98:e7:3f:f2:4d:de:4d:48:36:ee:ee:67:1a:b5:
         67:13:e9:6e:c4:2b:9a:a6:d3:5b:8f:ad:75:de:01:87:d7:73:
         f1:ff:82:8e:9e:67:ad:18:c9:9d:52:ff:d5:ea:04:59:77:c9:
         70:57:0a:5c:01:22:b0:b2:0e:4c:d3:55:1d:c4:96:ac:f2:15:
         39:5c:a4:3e:c2:c5:2c:7a:89:d3:96:0f:8b:50:aa:76:1d:20:
         ee:8e:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:12 2024 by rpki-client on console-fra.rpki-client.org