Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa
File:                     2ba4db20-c200-33ec-bf85-e62f88c290f1.roa (raw, json)
Hash identifier:          VeidqR/IzWcob9MseXBmwUCL0Pr/uXh1ZxEZdPFeIeY=
Subject key identifier:   90:48:C0:9E:F9:46:F1:94:2A:B1:AC:52:E0:2E:DD:FE:68:3E:07:D9
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844D2E52C90890E88ABF1EAC680
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa
Signing time:             Thu 08 Feb 2024 14:00:33 +0000
ROA not before:           Thu 08 Feb 2024 14:00:33 +0000
ROA not after:            Wed 08 May 2024 13:00:33 +0000
asID:                     9009
IP address blocks:        141.193.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d2:e5:2c:90:89:0e:88:ab:f1:ea:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb  8 14:00:33 2024 GMT
            Not After : May  8 13:00:33 2024 GMT
        Subject: CN=89cb2a96-d618-4967-beee-1422a0773280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:28:81:8c:c2:8a:1b:8a:35:6e:df:97:fe:
                    2c:7b:59:a3:86:fe:13:fb:99:df:e0:cc:f5:3a:47:
                    03:14:9e:da:3e:0d:7d:2e:41:04:8a:a3:af:6d:a3:
                    37:31:27:a3:99:c3:47:78:7b:3a:38:92:29:f8:82:
                    e5:66:b6:e3:75:5c:c9:48:6a:1d:a8:97:38:28:fb:
                    e5:54:14:4a:63:da:0e:0b:11:85:f4:9c:5f:03:18:
                    b5:12:b8:56:c7:7b:f6:1a:f2:e5:50:6f:3f:81:cb:
                    e9:c3:01:53:08:45:3d:62:88:61:bf:d8:14:90:23:
                    ca:1f:f6:b2:b2:cc:0f:21:17:94:3d:e9:a0:4d:9e:
                    bd:92:aa:c7:c5:ea:8e:21:30:7c:a0:0c:ba:cf:aa:
                    26:da:ed:78:ba:99:79:60:1f:b3:b9:b9:57:a7:78:
                    05:aa:fe:fc:40:2b:12:44:1f:7d:7a:29:40:d5:6a:
                    92:8c:ea:54:bd:3f:de:76:84:92:64:61:e6:a2:64:
                    ad:9b:40:47:31:6a:59:ae:35:dc:96:72:81:37:f0:
                    c7:45:69:13:e2:22:b0:ff:e4:12:e2:f9:ca:43:99:
                    d4:74:26:ac:e5:d2:89:7b:1a:70:ae:ac:90:f2:e0:
                    e2:fe:a3:ed:66:7a:17:3e:8a:8f:26:7f:1d:30:4a:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:C0:9E:F9:46:F1:94:2A:B1:AC:52:E0:2E:DD:FE:68:3E:07:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:0b:f5:42:3b:ff:8e:fd:65:f9:bf:16:d2:e9:0e:f2:26:
         28:c1:96:a3:81:61:46:0c:ba:ea:a4:1c:83:aa:ae:d3:09:1b:
         b7:dc:0f:41:a5:fe:2b:bc:fc:00:36:f8:de:92:f4:47:40:9a:
         d3:88:a4:42:ce:9c:6e:b0:a3:a8:b8:a7:12:4a:09:ec:0e:10:
         72:a8:22:f7:fd:bd:05:4c:27:0b:1b:47:f8:7d:32:c2:a8:51:
         d1:3e:03:ad:25:3e:ee:b5:ab:2a:c0:f9:19:f0:0d:fa:19:3e:
         b7:94:06:b8:8f:92:d1:bf:2a:e6:cc:62:70:7b:e7:c9:5f:c9:
         85:5c:99:ca:68:2d:ea:be:d8:d1:20:be:f4:eb:e9:b2:a2:ef:
         2f:2b:b9:36:21:2a:75:e9:ad:3c:33:ba:45:40:bf:79:e6:b6:
         2e:0f:89:7f:37:0c:11:2e:e9:06:de:fa:22:99:21:51:ef:b7:
         24:41:f7:83:aa:5d:05:27:75:4a:8b:58:e0:c5:37:7d:f7:1d:
         7d:3e:36:9f:d9:32:81:96:94:94:78:33:02:b5:ed:3b:d9:62:
         72:75:ba:14:79:8e:07:6d:e2:94:e7:43:e0:15:e0:3c:55:4d:
         08:9d:d2:48:91:7d:76:38:c7:4c:15:1d:d5:a0:17:55:9d:e6:
         83:3b:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:52:20 2024 by rpki-client on console-ams.rpki-client.org