Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/ee1ab05f-9b6f-37e9-abfb-3c22fad85260.roa
File:                     ee1ab05f-9b6f-37e9-abfb-3c22fad85260.roa (raw, json)
Hash identifier:          VkwD4ZzStDtb2P5xBmVbMyeYJs6XY1x35OWRJzHP1BQ=
Subject key identifier:   4F:28:E3:94:7C:AE:FE:1D:9B:07:99:20:87:D9:09:5E:AC:83:F9:E2
Certificate issuer:       /CN=506bcebe-036e-4f01-b460-22929ff0f236
Certificate serial:       010D0C9F432858455762CBB18DD397F2EEDCF7D0
Authority key identifier: C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/ee1ab05f-9b6f-37e9-abfb-3c22fad85260.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     398643
IP address blocks:        192.148.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:cb:b1:8d:d3:97:f2:ee:dc:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506bcebe-036e-4f01-b460-22929ff0f236
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=91bbe559-2d50-4d2a-bcd7-8284ab2c4fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:bc:89:98:e3:a4:51:ad:f0:48:2c:50:d4:
                    2f:c6:16:f4:1b:f9:db:7e:49:aa:f6:ab:c7:1f:25:
                    3b:e4:a8:ed:46:1a:db:58:61:d6:30:5b:c3:3a:72:
                    94:b6:2e:3d:12:a2:a5:09:cf:ac:f8:a0:4d:12:ee:
                    67:e3:e6:3c:88:10:89:7a:ff:8b:8f:4e:ac:7b:31:
                    89:c8:6d:a7:c2:21:b7:36:4f:22:e5:1c:77:92:29:
                    63:4f:1e:b3:d7:54:7f:73:34:cc:1d:bf:8c:db:01:
                    bc:0b:ef:1c:de:0c:fe:e6:c9:a3:30:3b:cb:ac:df:
                    b4:0d:ea:a1:28:21:2c:19:98:a9:5e:ac:97:fe:f5:
                    3f:d6:66:65:6e:06:00:4b:07:d5:64:8c:47:a7:a1:
                    62:2a:e8:ea:d9:86:fb:90:e3:6c:05:5a:3b:95:61:
                    ba:7d:f8:d8:ee:15:08:f0:b7:37:7f:dc:a7:3c:17:
                    be:9e:fc:90:17:3b:65:3d:74:f5:97:49:7d:23:52:
                    47:bd:e7:cc:40:06:eb:1a:bd:ae:20:e3:13:35:ba:
                    ce:85:c0:d1:02:18:e9:18:d0:52:2a:f9:77:03:89:
                    25:4d:5c:82:d7:ce:cb:81:19:1e:bb:27:dd:dc:35:
                    75:01:0e:fa:f5:d3:55:7b:b4:37:0a:52:d6:a6:84:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:28:E3:94:7C:AE:FE:1D:9B:07:99:20:87:D9:09:5E:AC:83:F9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/ee1ab05f-9b6f-37e9-abfb-3c22fad85260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl

            X509v3 Authority Key Identifier:
                keyid:C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:65:ba:19:d2:43:69:48:3a:90:6b:77:3b:03:fb:fc:fe:
         bd:b7:62:90:c6:ee:c2:96:c4:5a:2d:ac:bb:9e:10:35:f4:35:
         04:38:23:46:9e:3c:82:f2:ab:5c:4a:af:29:04:9b:b8:f4:18:
         eb:b9:67:ee:79:59:e4:8c:af:3a:cf:17:21:6b:c9:2e:97:c4:
         8f:0e:75:11:cf:6c:53:8d:2f:20:16:2e:86:ac:64:06:c4:41:
         32:8c:bb:6e:9b:69:86:8e:88:d4:70:b3:73:e6:69:89:26:ef:
         2c:f7:ae:78:1b:98:96:e7:82:6d:51:82:d2:9f:bb:d2:a6:da:
         9c:e9:1c:67:ce:8f:45:c9:cd:66:b0:70:ff:31:3e:7c:70:55:
         13:77:be:a6:07:e4:f5:00:7b:7a:2d:01:67:5e:f3:89:f5:71:
         f7:0e:15:75:83:88:63:a6:cc:54:6e:17:23:72:75:c4:48:eb:
         5e:d0:be:e4:fc:bc:f4:11:4e:47:56:83:cb:af:27:a8:9b:39:
         d8:fa:69:f0:51:6d:8b:ff:d5:37:ad:77:d3:7f:b4:88:f6:13:
         ee:e7:24:06:2d:d2:ba:74:1a:b8:6f:23:f9:10:c6:66:4a:97:
         d6:aa:eb:da:86:cf:69:e9:69:72:c5:12:9c:c0:77:49:c2:6a:
         77:fa:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:41 2024 by rpki-client on console-ams.rpki-client.org