Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa
File:                     ca233fea-c265-3736-9f5f-ff863e476586.roa (raw, json)
Hash identifier:          Fx1j9PuVO5dIuxHGXquu1BSIBy6SBEHUtFOibZSJB2s=
Subject key identifier:   96:08:E8:A8:0F:2C:07:3A:9D:7F:47:A6:AB:66:73:95:92:CD:35:FD
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285845A16459B938324963F52E9BB0
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa
Signing time:             Mon 22 Apr 2024 13:13:25 +0000
ROA not before:           Mon 22 Apr 2024 13:13:25 +0000
ROA not after:            Sun 21 Jul 2024 13:13:25 +0000
asID:                     400238
IP address blocks:        147.185.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:64:59:b9:38:32:49:63:f5:2e:9b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Apr 22 13:13:25 2024 GMT
            Not After : Jul 21 13:13:25 2024 GMT
        Subject: CN=73660a08-f911-4a21-a494-14c4d43f408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:25:31:db:0f:4d:e6:b7:12:b4:d3:6e:e9:
                    46:cc:83:15:bb:66:4b:79:63:3c:40:8a:e4:b1:26:
                    65:c8:a1:ed:b4:01:65:92:e6:8c:22:52:06:ba:82:
                    06:61:27:7a:a5:61:5c:07:b2:70:60:5c:c9:d4:37:
                    9d:97:42:82:1c:3f:5b:bd:f7:c4:73:a2:11:1e:f2:
                    ec:36:0e:1d:5c:8f:b0:e2:f4:d7:3b:7b:77:ff:d2:
                    bc:49:c0:0a:a6:30:70:c9:46:8d:f4:be:77:e3:26:
                    34:0b:b7:66:62:f8:09:b9:ed:29:1f:77:79:46:b3:
                    79:8b:01:5e:b7:a1:6f:4b:43:36:90:ab:58:9c:ed:
                    7b:7f:1f:49:71:0a:5d:53:98:ba:c9:23:33:71:7f:
                    65:39:57:62:95:e2:dc:d3:6b:6f:ea:bc:b2:43:f4:
                    ee:b7:e8:91:0a:cf:31:6d:85:16:6b:c8:b6:4b:8b:
                    e1:84:e0:fe:32:fe:58:6a:53:05:21:83:ba:78:d6:
                    9a:04:48:9d:6d:11:b3:df:48:c9:6f:61:4d:dd:f3:
                    be:68:ab:59:ab:a7:22:6a:49:d2:9d:cd:45:e4:c9:
                    28:ed:fe:a6:fb:8a:51:71:84:ff:08:39:bb:17:03:
                    d0:5d:75:d9:de:59:47:b1:de:ae:d1:1b:b4:92:ae:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:E8:A8:0F:2C:07:3A:9D:7F:47:A6:AB:66:73:95:92:CD:35:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:b5:7c:52:63:eb:30:f0:bc:aa:fc:ef:e1:7f:5d:04:9f:
         c1:78:7d:ed:3c:5a:3d:fd:04:4c:43:46:4a:83:f4:47:eb:f1:
         a7:19:72:36:84:f6:1b:98:27:7d:40:03:5e:30:d8:45:90:3c:
         34:22:22:d9:e5:f3:24:0e:7e:c0:07:0e:9a:4e:36:1b:b8:b7:
         c4:ea:37:77:85:d5:b8:21:46:f5:dd:11:44:a9:6b:4f:e9:64:
         7f:7d:c8:f9:13:d7:4a:0c:f6:4a:14:58:c5:71:fd:ff:7e:c7:
         0d:46:ee:74:38:17:d6:8a:0e:c8:9d:e2:d9:bf:24:1f:3b:55:
         a1:50:b7:25:18:7b:79:97:7b:e0:f9:82:97:f1:62:a3:f1:f2:
         f5:f0:32:57:c2:ea:02:e6:81:9c:a8:6b:71:01:65:11:41:3f:
         31:80:69:60:7d:6a:cb:56:95:a6:4d:c3:fd:6b:15:6d:10:69:
         b7:d8:77:f6:f5:af:98:01:60:01:d4:2e:10:53:88:ec:15:0f:
         61:c4:8a:46:fc:2d:1a:24:4e:77:fc:ca:b1:01:dd:62:c4:88:
         71:21:5f:1f:fc:6c:50:0c:b3:a8:de:1e:13:bf:20:a7:71:b1:
         24:20:30:40:4f:6d:06:8d:60:1a:48:2b:26:bb:c6:21:eb:54:
         6f:09:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:58:52 2024 by rpki-client on console-ams.rpki-client.org