Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa
File:                     acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa (raw, json)
Hash identifier:          43vE78mGmtTfkHY0bO9uutLmiARNWwT82yoB7YCo8g4=
Subject key identifier:   87:66:81:AD:85:CC:81:27:7A:C5:1B:BF:71:A7:57:9E:46:E0:43:93
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2CA0859D240518BDF1700
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        198.100.44.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ca:08:59:d2:40:51:8b:df:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=bd632144-ac3e-4351-991d-f8650c69ddd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:bc:f6:30:67:55:4e:11:f4:3d:b6:7a:56:
                    b9:d1:2d:c5:9c:e7:f3:d9:42:47:5d:dc:b0:52:db:
                    d8:5c:7b:fb:7c:42:d1:7d:32:d5:6a:51:7d:77:d3:
                    32:17:04:ee:c5:a3:2c:5a:e5:bb:16:6f:1a:37:d0:
                    f3:a5:ca:33:89:ac:87:38:c5:42:40:87:d1:6b:b0:
                    b5:8e:28:78:56:11:6c:c3:49:08:f9:64:a0:80:37:
                    18:80:a5:44:27:54:1a:d9:83:53:61:96:e4:38:f2:
                    d1:1e:a3:96:79:14:85:06:28:e6:c7:ba:a3:75:8d:
                    96:ce:67:97:96:e5:52:87:66:40:a0:aa:66:7a:31:
                    a2:8f:29:7f:02:de:c3:c8:56:94:cd:b6:42:51:8a:
                    07:ab:b6:7e:0e:47:31:89:8b:0d:b3:99:bc:47:54:
                    8c:c8:3f:a3:11:8d:8e:23:92:fa:d4:e6:a7:d2:19:
                    d0:d8:92:37:c2:42:4b:50:a6:91:5f:f2:3a:16:66:
                    f6:4b:b4:01:2a:61:00:43:bf:5e:a5:92:8c:d0:18:
                    e6:0b:1d:77:02:c2:aa:88:70:2a:91:87:0a:91:03:
                    7b:89:4d:80:8c:f7:bf:bf:5d:8e:9a:ce:ad:c7:43:
                    4f:f4:a6:d6:89:c5:89:00:bc:d9:fa:68:70:f7:27:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:81:AD:85:CC:81:27:7A:C5:1B:BF:71:A7:57:9E:46:E0:43:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.100.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:97:15:d6:20:72:bb:f1:3d:3b:af:c4:c1:a3:2d:f1:96:8b:
         06:af:13:b9:ba:33:fd:69:1c:f0:e3:90:06:59:6f:b9:5d:d9:
         5d:75:b3:61:e6:a4:d4:f3:0f:00:f4:03:f9:95:24:fe:35:53:
         e8:52:90:63:24:69:7f:8c:7e:cb:f6:b1:41:62:0e:32:0a:86:
         b0:31:5c:71:88:12:89:5d:d8:e9:67:76:a9:9a:15:bf:48:60:
         83:4f:05:d0:2f:b2:1f:28:25:52:72:ff:8f:8f:04:e5:df:5f:
         f8:b6:b4:a2:dd:d7:43:01:d3:c5:3c:d0:da:2b:5f:04:38:14:
         59:98:ad:73:b1:30:0d:30:1c:6d:cf:e3:b7:02:4a:30:c8:40:
         6b:0f:db:17:29:e9:b6:24:43:f9:07:bc:24:43:1c:2c:10:e9:
         94:e1:f4:38:e5:eb:dd:e9:b9:e3:5e:c0:32:42:b3:97:12:76:
         a3:ce:64:3d:5f:0d:bc:89:a5:ca:9f:fb:05:4c:d2:b4:61:29:
         6b:f5:3d:dd:47:79:cf:16:66:9d:4c:05:dc:dc:29:3c:22:0f:
         0c:d9:d4:0d:2a:8f:36:92:a8:9e:dd:e8:f3:7f:61:d2:bb:6d:
         22:7b:57:ad:2b:50:8e:6b:f8:3b:3c:a9:21:71:87:aa:d5:9b:
         3d:c5:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:35 2024 by rpki-client on console-ams.rpki-client.org