Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
File:                     f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa (raw, json)
Hash identifier:          VYqTYMMAy+eaT+xOJvN0yDQ4Z15fg7MC3WSVkksxa2c=
Subject key identifier:   EE:5C:6D:4E:1A:02:07:2F:02:BB:EC:89:C2:79:E5:3F:84:53:85:BF
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CAEC28196B2847624D120
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 09 Jul 2023 18:57:25 +0000
asID:                     262287
IP address blocks:        198.145.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ae:c2:81:96:b2:84:76:24:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  9 18:57:25 2023 GMT
        Subject: CN=ac37d5df-fc70-4ae2-aeb4-fd9b591779f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:f2:1d:a9:cd:3f:36:d5:77:de:ba:a3:38:
                    d2:a0:92:a1:c7:74:56:3d:6b:e5:37:f9:b4:de:1d:
                    f3:d8:71:0d:07:f5:02:e6:9b:33:fc:37:b0:02:13:
                    2a:5d:3e:c1:2b:6a:5a:ce:c9:33:48:c8:3a:89:ab:
                    13:55:0e:9c:95:83:ab:67:e6:32:d3:b7:23:79:67:
                    f1:ed:b6:61:af:e9:88:42:8b:93:30:f2:31:31:50:
                    79:f4:0a:19:7e:f4:cb:99:c1:7c:75:f0:23:e7:ee:
                    fe:83:a1:15:05:e9:fc:86:0d:83:21:b2:d4:75:70:
                    22:3f:8b:69:a9:69:d5:4a:c0:72:0c:0c:29:f8:ac:
                    72:6d:ce:8b:3d:4d:9d:cd:69:32:8f:d1:f9:0d:a1:
                    5b:75:72:06:d1:f5:31:9c:81:3b:fc:7b:f6:f7:e5:
                    13:79:b8:a1:ab:43:32:c5:b6:53:d9:b1:5b:b3:20:
                    44:6d:3e:75:63:84:cc:15:91:b8:76:53:09:47:f5:
                    af:12:35:d0:47:8e:b7:95:ac:1c:7f:56:69:6d:c1:
                    7f:41:db:45:24:fa:bf:fe:4e:ae:f3:ce:ea:c9:37:
                    c0:09:3f:91:3b:a8:cc:01:aa:6a:b2:c7:9a:54:af:
                    6e:5c:77:de:56:61:46:46:56:bc:64:88:5d:1b:d5:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:5C:6D:4E:1A:02:07:2F:02:BB:EC:89:C2:79:E5:3F:84:53:85:BF
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0e9d26f-7948-3c83-aa8b-d068d90acd96.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier: 
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:6b:4d:26:55:eb:f7:fc:db:56:e7:6e:e6:4c:6c:40:c1:
         c5:2f:99:b8:26:1b:1f:12:10:74:f5:6f:1b:25:d6:b5:5b:3c:
         46:6c:73:63:c5:64:2e:b4:b5:0e:53:3f:8a:ee:e1:f1:5e:6d:
         b9:fa:9d:2d:1d:bd:7e:98:6c:8c:e0:f9:e8:53:39:9d:74:50:
         13:6c:e4:f7:f0:ed:ef:e1:ed:26:73:67:ad:ae:e7:90:12:0d:
         21:af:04:01:2c:28:73:7c:f5:15:a1:e6:e4:7e:7a:f8:99:51:
         46:66:96:32:c7:b4:f1:86:d7:0d:d8:f6:fc:77:a1:1c:fa:c6:
         c5:27:b7:ca:4a:26:f0:45:74:8a:3f:0f:ea:c5:53:e1:97:1a:
         af:8f:4f:56:bc:68:0c:cb:5c:90:40:58:a2:6d:32:51:44:c5:
         03:f7:da:0b:5a:79:03:87:3a:51:19:c2:1b:a0:88:4f:b2:e8:
         e5:4a:21:a6:56:f3:69:fa:95:2c:ea:4f:b0:b9:71:df:81:53:
         1f:bb:1c:38:64:d6:08:22:d2:ca:b6:6f:9a:01:4b:cd:cb:8b:
         af:85:45:44:97:b8:6d:e8:34:99:eb:9c:f2:18:00:37:ec:19:
         29:f4:21:4d:76:e4:e2:2f:f3:ab:6c:86:9c:7d:77:51:80:91:
         3d:5a:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:14 2023 by rpki-client on console-ams.rpki-client.org