Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa
File:                     f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa (raw, json)
Hash identifier:          3lxyHoGk/3ExYyrhZLki5YAbvkjvJOeSQ6PJrHv7g1Y=
Subject key identifier:   A5:72:38:69:22:F8:2B:F9:3C:16:7F:EB:4B:91:F1:C1:E7:0D:2A:3B
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285844FCC5626ADD8DE52674C89B90
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     40816
IP address blocks:        199.184.126.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:62:6a:dd:8d:e5:26:74:c8:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=bdbefc7e-add5-40cd-9780-255214f0fe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:47:0d:95:05:cd:04:06:57:d0:b5:14:50:
                    15:66:4d:f4:23:98:e6:91:ac:f7:81:a6:55:27:81:
                    06:e4:fa:70:29:ba:f5:9a:d2:da:36:c8:1c:85:64:
                    d7:ba:0b:b1:9e:4a:8a:1a:6d:d7:d9:55:12:4f:ee:
                    0b:78:8a:f1:bf:6b:85:de:2b:d4:a1:21:e1:cf:81:
                    8a:18:cb:8a:9d:f2:09:55:ce:45:8f:ed:36:fc:24:
                    39:48:75:7d:6c:d0:be:82:98:24:c0:0a:1e:df:8e:
                    69:fc:2e:94:95:ca:5b:ba:7c:a6:f2:f6:16:5b:c8:
                    ba:24:41:1d:a4:7a:db:32:be:32:01:a2:a3:ba:a9:
                    85:73:fc:d0:db:d7:15:d9:d3:8b:e3:7a:b2:bc:0d:
                    57:06:38:44:9b:03:32:f8:27:31:38:d7:c2:3d:88:
                    67:d4:9d:e0:53:0b:ef:00:1e:4f:7d:7b:10:41:0c:
                    05:82:2a:ad:f4:a5:f8:8a:32:be:0b:e2:04:ef:46:
                    23:2d:2a:e9:e8:44:ed:b9:e4:87:a8:10:c0:60:ea:
                    00:89:4b:e7:19:4d:5a:2a:63:5c:8e:f4:00:be:1d:
                    a0:97:2e:bb:c7:e7:10:b8:b0:70:32:f0:3b:30:6f:
                    99:7a:bf:c0:0d:00:3d:8c:e4:20:f1:9e:4f:d9:f3:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:38:69:22:F8:2B:F9:3C:16:7F:EB:4B:91:F1:C1:E7:0D:2A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:4f:19:97:1f:2a:2d:15:6f:6b:32:be:c4:37:0a:1d:c6:
         5c:50:3d:3d:96:bb:56:95:a8:d6:8f:4d:b8:83:62:b2:c6:b9:
         df:d3:a6:be:25:4d:4d:93:12:7e:9d:c9:71:60:57:b4:07:8e:
         57:ab:c5:bd:0f:a4:ce:e4:97:ae:d7:77:f8:43:e5:d4:6f:fd:
         19:0e:da:29:56:a7:3f:d6:dc:24:8d:c3:d1:fc:8a:e2:b0:49:
         13:e3:b6:31:e1:1e:9b:e3:5c:12:4d:a9:f1:2b:6d:a1:c1:0f:
         63:d2:1a:50:f4:91:04:af:91:e4:f9:64:7b:3d:7f:fa:99:ff:
         8c:a1:97:cc:02:e7:a1:5a:1a:a3:78:64:a3:c6:b6:cd:e2:1b:
         a3:e6:b9:02:89:6f:96:46:00:c2:1a:06:2c:ca:5d:11:5d:a9:
         4a:54:b0:aa:93:fc:3a:a5:63:c8:66:e9:c6:b0:45:33:c1:68:
         59:9c:ae:2f:9e:2a:3a:cd:8d:35:e9:20:9c:b0:51:5d:cc:2e:
         c5:4c:24:ff:b0:68:63:22:11:28:99:5d:87:3c:ed:96:d7:cf:
         c3:c3:18:3e:7e:23:95:85:a1:5b:fa:e8:35:4a:e2:55:82:a6:
         60:8e:5e:9c:a6:19:5e:19:e0:90:f1:bb:df:69:d3:3c:57:02:
         2f:d0:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:06 2024 by rpki-client on console-fra.rpki-client.org