Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
File:                     845474c5-98b4-30e8-b075-80fb762db4b6.roa (raw, json)
Hash identifier:          A54rDGeMJ814JRygJZgWPuJrV1vn/CNCl3G0dRzk6UU=
Subject key identifier:   62:30:5A:A9:8E:31:89:F9:2C:5D:4A:A1:AF:99:CF:CE:EC:7F:CD:D7
Certificate issuer:       /CN=4884cca8-e13a-4d48-82af-7839862b6341
Certificate serial:       010D0C9F4328584505256E3D12E85545D4C86C80
Authority key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        192.68.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:6e:3d:12:e8:55:45:d4:c8:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=6cb86667-70b7-446c-92b8-150f5306355d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:2b:74:6e:c0:47:a4:fb:c7:00:a6:da:d8:
                    25:55:b0:c1:05:d2:3d:a4:87:e0:ed:4b:c1:07:b5:
                    34:a5:12:3b:0c:01:6e:84:dd:9d:bf:f6:fb:99:8e:
                    1b:1f:38:07:d3:60:11:88:43:43:d7:df:b8:86:67:
                    43:bd:5f:95:99:ec:27:54:6e:00:a8:07:9f:d8:07:
                    f7:fb:a0:a6:ba:0a:44:d7:38:fa:0a:78:41:d3:79:
                    d9:88:5a:c5:46:2a:b1:43:6e:ca:4d:26:00:34:b8:
                    ee:69:0b:9a:c4:f6:fe:c0:ec:a9:5b:bc:6b:68:c2:
                    84:61:34:04:25:72:8d:45:3e:2b:29:12:0b:83:1a:
                    4c:89:06:2a:b1:35:de:4b:33:3f:8a:df:e4:d4:1d:
                    a5:be:65:d7:4a:56:9e:dc:a0:ec:d5:1e:e5:06:30:
                    67:02:c9:74:3b:b4:2b:dc:a7:dc:21:bc:87:cc:2f:
                    1c:4b:c9:a6:a1:2c:cf:c4:16:5c:98:80:2a:e5:9c:
                    7b:d9:30:94:28:bc:9a:1c:1e:c6:19:9c:71:4c:32:
                    72:03:e5:e3:97:b3:1c:57:7a:51:9d:ab:c8:4f:cc:
                    a1:11:2e:e6:3d:53:64:e3:ac:e3:61:a2:50:2c:ee:
                    b3:de:98:da:04:21:d8:c3:56:ed:a1:e4:8a:8d:d6:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:5A:A9:8E:31:89:F9:2C:5D:4A:A1:AF:99:CF:CE:EC:7F:CD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:c7:59:5d:22:8a:21:77:bc:21:da:46:35:74:bd:74:b0:
         5c:f6:a2:ca:0f:69:b3:d4:9c:23:0a:eb:fa:ac:24:a3:0c:f1:
         7c:63:7c:4f:11:8b:b2:e8:b2:fe:3f:1b:bd:e2:cc:ef:4b:ac:
         6c:d1:0c:3a:e5:d4:a5:cb:6a:0b:b4:dc:74:d2:9f:f1:cd:e7:
         24:6a:e2:2a:96:b2:f6:ce:05:56:e2:81:4b:97:5f:3d:89:ba:
         78:45:ba:e0:2b:ed:69:d1:72:50:43:aa:87:c6:c5:8a:f7:51:
         63:07:bf:74:0d:97:71:30:7d:f3:de:66:bb:82:e7:0e:ab:36:
         c0:bb:8c:23:f1:3e:fa:33:eb:6b:a3:46:36:ca:17:13:25:1b:
         1f:5c:52:f2:8c:cb:b7:29:f8:9f:92:fb:af:17:f9:fb:46:11:
         1d:f3:0d:66:55:ce:f4:2e:34:a7:a8:55:48:6d:f2:06:0a:2b:
         8e:46:95:29:40:19:63:2e:cf:e8:43:32:06:7c:47:ca:1a:fb:
         c4:48:2a:da:31:49:d8:0b:a1:f9:c7:9f:78:63:5f:9b:13:d6:
         11:3d:e7:0e:8e:2e:c4:7f:c6:16:6c:16:19:78:d4:c2:1c:ab:
         96:02:fc:c6:01:b6:e6:6a:c4:3a:7d:26:c2:f6:75:0e:b0:93:
         90:73:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:07 2024 by rpki-client on console-fra.rpki-client.org