Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
File:                     f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa (raw, json)
Hash identifier:          BhbD8Z3sOAIXVV+8dWkkPmdMqelBUoH0TPyVabypCJA=
Subject key identifier:   84:65:EA:D6:D2:A1:2F:C5:02:35:13:AD:1B:C5:CF:4A:3C:C0:E8:B5
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285845025AD311426759C87EE83C00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     262287
IP address blocks:        198.145.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d3:11:42:67:59:c8:7e:e8:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=87d236c4-19d3-4f6d-83fe-7a6f73a0ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:8f:e2:80:a0:62:1f:36:da:3c:b3:c1:13:
                    88:71:b9:a0:9d:5f:99:7b:ac:31:00:c1:a8:e4:02:
                    36:34:e8:18:2f:f0:1d:c1:f1:f5:0b:e7:58:18:29:
                    c2:80:81:a0:3c:95:61:b8:ec:54:cb:bd:c9:2e:cf:
                    f5:a7:eb:a0:f0:24:5b:66:e9:cb:51:0b:bc:c5:79:
                    69:a3:c8:8a:12:52:82:c5:4e:e3:e8:7e:56:5a:35:
                    4c:be:50:e8:00:c6:20:a3:d9:ae:90:c5:ab:d9:e2:
                    1e:77:2a:f3:43:c1:05:66:49:3a:41:bd:df:d5:31:
                    82:24:8a:b7:ac:12:f5:e6:31:c0:e5:e4:24:af:df:
                    9e:04:d1:c8:9c:c5:da:ba:f6:b6:c6:c4:f7:0b:bc:
                    c0:44:b7:70:8a:d3:ba:00:df:25:14:15:4a:95:fc:
                    21:61:24:10:24:3e:c8:75:fd:95:da:6f:90:83:4b:
                    41:5e:01:1d:ff:f3:1e:62:b7:d9:e8:0b:b4:98:4b:
                    99:e8:64:dc:d3:2c:0b:78:24:bc:0e:ba:f9:b6:bc:
                    cc:25:18:8a:a4:02:f8:36:19:f7:1a:a2:85:92:b6:
                    65:df:f5:72:cc:e7:b7:b1:bc:a2:65:34:64:ea:a9:
                    78:9b:d8:a6:6a:ea:d0:e9:a7:99:7a:cf:73:89:a0:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:EA:D6:D2:A1:2F:C5:02:35:13:AD:1B:C5:CF:4A:3C:C0:E8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6d:70:d3:a9:30:71:b5:81:ba:39:b7:c3:53:7d:6b:5d:d5:
         2d:e5:89:8d:71:66:c4:26:a4:b3:71:e8:a6:26:77:cb:2e:52:
         2b:8e:40:e6:4f:38:3e:03:57:84:65:25:17:35:a2:cf:aa:4f:
         51:a7:74:ab:6d:a9:d5:5f:bf:18:69:01:6a:18:68:44:b2:14:
         c8:89:a0:aa:42:e4:48:91:45:2f:cc:c5:5f:84:a1:94:04:57:
         98:f8:cf:0a:ed:f0:d2:9f:6e:23:59:a0:1d:f7:2d:35:18:19:
         89:3b:d8:5f:34:66:f8:c9:38:7c:a1:a4:95:90:5b:6e:34:d8:
         4e:0d:8b:5b:cb:7b:29:92:42:9a:48:49:77:8c:09:87:a9:66:
         ea:5a:51:70:ab:3b:0e:24:a8:ee:a7:6f:98:7e:59:7a:a9:53:
         b3:a5:2a:12:24:98:7b:63:64:1e:b4:16:06:20:78:f1:1b:a5:
         c4:20:08:e6:77:a2:ce:8c:77:c7:3d:be:5a:49:c6:f3:80:07:
         9d:d2:52:51:a1:d7:2e:bf:7f:5d:6e:ca:7b:88:78:a0:88:ba:
         a4:a0:83:7a:cb:31:4e:f4:d5:8d:b3:ed:c1:b1:8c:42:76:19:
         81:6c:dc:66:93:54:14:5f:65:be:24:ce:86:83:fc:fc:e1:71:
         90:80:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:26:09 2024 by rpki-client on console-fra.rpki-client.org