Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa
File:                     addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa (raw, json)
Hash identifier:          QGWMVCneeGKgSo7saOt0FAd77kkW/PAc+BRcSgdwMMc=
Subject key identifier:   7C:0E:6A:2C:9C:B8:06:72:21:BF:A8:9F:C4:B9:50:3A:71:8E:56:44
Certificate issuer:       /CN=2551cb31-e55c-4d6e-a523-619ecb2ac29b
Certificate serial:       010D0C9F43285845410D4D896D7D436428275300
Authority key identifier: 36:A6:FD:3F:31:37:25:A4:D8:F5:5F:9C:CC:9C:29:1F:2F:20:FD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     14618
IP address blocks:        205.236.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:4d:89:6d:7d:43:64:28:27:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2551cb31-e55c-4d6e-a523-619ecb2ac29b
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=c86ab1ff-ef24-4973-97b3-0dea226e24dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:a5:1e:5b:03:d4:f1:03:c5:66:4a:18:48:
                    87:93:20:9d:a9:4a:0e:31:42:17:40:66:a5:6e:f0:
                    98:89:6e:7d:62:5b:24:2c:77:67:c0:7d:44:6e:4e:
                    35:4b:f4:4c:ab:6f:18:6d:ba:05:84:24:41:68:7c:
                    b9:dc:a7:eb:e3:b2:f3:43:f8:69:8e:79:45:04:15:
                    a0:d8:89:db:99:8f:d8:5b:d9:a6:64:e2:07:fc:ad:
                    cf:bd:1c:ec:98:41:17:16:29:82:53:96:48:59:94:
                    b4:9f:ea:2f:80:c4:e5:52:aa:3d:09:7e:32:78:e0:
                    bc:5e:bb:59:09:08:6e:7f:d7:6f:c9:15:09:34:4e:
                    aa:be:bd:07:20:74:57:54:3e:bf:f8:a6:86:13:84:
                    ba:72:2c:32:e6:8f:90:20:88:7a:a9:95:5f:74:32:
                    ec:5e:a0:ad:ac:74:f4:6f:03:12:0d:97:67:65:46:
                    92:21:99:e2:bf:e3:42:bc:4e:ae:58:f4:92:c8:f1:
                    d9:4e:64:c9:c2:6b:49:05:aa:c7:4f:5f:ad:a4:26:
                    cc:24:c6:f5:f1:48:51:03:c8:dc:10:04:75:42:35:
                    99:b6:af:48:f1:42:bd:c0:92:23:f0:a8:b2:72:31:
                    9c:91:8b:76:0d:cc:ce:f3:02:45:12:3e:b3:57:7e:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:6A:2C:9C:B8:06:72:21:BF:A8:9F:C4:B9:50:3A:71:8E:56:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.crl

            X509v3 Authority Key Identifier:
                keyid:36:A6:FD:3F:31:37:25:A4:D8:F5:5F:9C:CC:9C:29:1F:2F:20:FD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:14:c9:06:22:cf:f6:28:f7:e7:f6:da:1f:48:51:db:53:
         e4:aa:74:f8:53:a8:0d:9f:9d:0e:95:7a:b4:53:31:79:29:e8:
         21:9e:9e:f7:67:57:b2:d9:41:95:20:24:c6:ed:5a:42:f8:59:
         52:31:e2:52:5c:d5:f3:86:a1:29:7c:7e:bd:fa:7c:b6:96:01:
         55:59:26:10:e1:e3:e9:19:06:91:76:b4:2b:69:44:2c:a8:2b:
         d4:41:f4:3a:ae:3e:a2:9b:6c:0d:19:8e:5a:46:04:f3:bc:5f:
         ec:34:74:cf:62:0c:88:d4:4a:24:9d:6d:e2:43:ee:ec:6f:bc:
         94:c3:51:f0:da:f3:df:cc:32:b5:04:4b:22:65:78:a5:e2:86:
         e6:e8:e6:bb:22:61:2f:59:ef:e1:74:a0:0e:00:15:5d:4e:8f:
         af:9a:86:e6:0d:39:f9:81:ad:b1:05:8a:ca:7a:6c:a4:ea:49:
         08:0e:ce:4c:a3:f4:e0:f9:f3:15:cc:fb:bf:48:90:d6:46:ad:
         bd:3c:b4:3c:66:d8:c9:f3:3d:fc:36:f9:91:e1:86:91:5e:a2:
         ac:f9:a0:16:1f:80:60:bc:77:be:7a:f2:34:9a:60:33:39:bb:
         41:94:9f:18:44:f0:cf:70:bb:a8:3f:98:86:a7:06:05:28:58:
         c9:f4:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:52:01 2024 by rpki-client on console-ams.rpki-client.org