Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
File:                     3f3593ee-3773-397b-a47c-3d02f42f64d4.roa (raw, json)
Hash identifier:          2cj2T29PtLbPfHzXJ4oXfU6G4t7Z8m41nLxPyDUeiyM=
Subject key identifier:   C9:86:E6:30:83:49:4F:0D:25:B6:8D:3F:B8:92:9E:AA:D6:64:AE:E8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285841E46C9C190166CD3948CE3C00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 30 Jun 2023 00:26:57 +0000
asID:                     1239
IP address blocks:        158.115.228.0/23 maxlen: 23
                          141.193.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:9c:19:01:66:cd:39:48:ce:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 30 00:26:57 2023 GMT
        Subject: CN=3ea7b3ed-3701-4b3e-a110-b3cd18302614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:5b:a3:2a:d7:e7:89:3c:4f:16:af:b2:3e:
                    f5:13:f9:c4:80:79:0c:f1:9c:c0:81:77:5c:15:08:
                    16:bb:0f:53:98:55:37:52:99:7a:95:8e:74:3f:cd:
                    6a:71:bb:a1:5e:f0:6b:6a:0a:c4:18:83:6f:0d:85:
                    2c:36:35:9b:2e:ce:7c:54:c1:b5:5f:5d:34:97:37:
                    f5:8e:1f:48:a0:28:47:68:0a:c4:c2:d7:ca:e9:c2:
                    9b:54:03:49:ea:34:64:e8:bb:e4:d9:6c:83:c7:3a:
                    9e:77:45:63:eb:0d:2e:58:9c:9e:87:84:91:12:63:
                    33:de:78:f4:cd:1c:ed:9a:c1:d0:32:16:79:9e:d4:
                    65:11:fe:11:c6:80:de:58:d6:d9:b9:85:0c:55:06:
                    a5:79:01:3e:14:0e:4c:35:ec:9f:e8:f0:16:cb:b6:
                    32:7d:62:69:8e:a4:58:ae:72:a0:23:d3:9d:4c:ed:
                    df:00:d8:1e:ee:88:9c:75:63:b8:04:65:14:ef:8e:
                    c8:a1:a8:31:45:f2:dc:3d:3f:2c:05:9a:f2:a4:6e:
                    a2:e0:0a:29:54:2c:ad:7b:38:2c:e0:96:9c:2f:d2:
                    44:68:6c:3b:d0:46:6b:98:89:b7:a1:bf:9d:dd:08:
                    ae:2b:50:a6:1d:c5:49:84:d1:f5:2c:16:6b:2d:f2:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:86:E6:30:83:49:4F:0D:25:B6:8D:3F:B8:92:9E:AA:D6:64:AE:E8
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier: 
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.96.0/23
                  158.115.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:1d:67:84:63:f5:e4:ad:89:a2:50:06:34:0d:cf:90:84:
         d5:95:76:d5:69:15:5e:c2:92:4c:41:f9:22:1b:a3:83:c1:fb:
         d2:2d:0b:e4:34:e0:7a:68:0a:bc:29:96:d5:67:a8:a2:88:67:
         48:13:88:9c:44:d8:2e:36:90:6c:a9:cf:bb:b8:d2:c6:d0:f1:
         10:db:ca:c7:f1:84:f6:23:28:23:9e:dd:b6:a0:08:6d:17:16:
         6c:ca:4a:6d:1b:ce:f8:19:40:48:ed:9c:72:be:52:79:44:ef:
         d4:a7:db:a6:9f:07:3f:11:df:6e:b2:ae:cb:05:1f:63:1b:51:
         6d:88:e1:1b:4d:e0:97:2c:57:25:ac:04:4a:e0:e6:95:e7:95:
         d9:98:19:a4:f8:95:76:8a:26:9f:8e:22:fc:02:aa:c4:fb:90:
         ff:cb:e5:5e:2f:85:78:a0:65:f3:a3:c4:fb:6c:c9:40:74:fc:
         b1:df:94:f1:13:e1:f5:22:d2:fa:e7:03:70:3d:61:a4:37:54:
         bc:87:01:4a:64:c6:fa:fe:cd:46:ea:28:ca:10:da:84:6c:42:
         b7:40:2e:6b:56:09:9d:07:e3:0c:de:34:43:d3:d1:73:9e:2f:
         f0:39:89:7d:0a:30:c9:b1:9b:92:1f:36:45:58:84:4f:a6:ef:
         0b:d2:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:16 2023 by rpki-client on console-ams.rpki-client.org