Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
File:                     6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa (raw, json)
Hash identifier:          jLGQOSaNm7OPvZzDBCzq0bfy2+13GEbpaIe6ycwi+YE=
Subject key identifier:   19:29:B6:5F:B7:75:F1:15:EA:B5:32:17:F2:7C:18:13:D7:99:C0:C7
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F43285845496D5E0C4E31D22E6FA3E340
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     198949
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5e:0c:4e:31:d2:2e:6f:a3:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=31fcdad3-9fa7-4d80-9a8c-8a3bba92fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:db:a4:46:17:ff:d8:c9:49:6c:59:44:c2:
                    aa:27:37:1f:f9:67:4f:f7:a3:bf:3b:55:f7:19:0b:
                    b2:91:3d:2e:39:4a:d6:df:ef:8a:bc:45:3c:de:b6:
                    35:f4:d5:e2:dd:d9:32:64:f0:26:e0:17:43:c2:5f:
                    9f:50:28:c5:00:46:fe:e3:fe:e2:d0:00:2e:e5:26:
                    d1:ee:f7:9e:73:fa:7e:6c:a7:cc:c3:ed:07:17:27:
                    79:d6:1a:06:85:fc:84:e6:e0:00:22:48:d6:a4:7e:
                    19:16:56:56:2e:4e:3b:58:97:84:2d:53:53:ae:62:
                    1e:6b:a1:dd:af:38:99:2e:ff:55:0c:9d:92:0d:35:
                    78:0e:64:18:c1:36:38:58:fd:ef:87:d2:40:c6:89:
                    02:b4:08:36:70:81:a0:7a:5d:8a:57:6a:a4:f3:70:
                    42:5d:43:a6:4c:0d:ff:f1:2e:80:88:b1:3b:ff:12:
                    a4:62:5f:e3:59:97:39:22:2a:ca:2e:3e:ff:1b:8b:
                    17:a1:6e:96:8e:52:f1:ef:d8:93:ef:9c:b6:9f:ea:
                    d9:4d:88:c8:26:03:3d:6e:6c:00:79:1a:f6:79:d9:
                    02:30:76:3e:19:64:21:be:0b:20:60:3e:b7:50:92:
                    74:43:f6:ba:f2:c5:58:18:ab:41:94:c0:75:27:0f:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:B6:5F:B7:75:F1:15:EA:B5:32:17:F2:7C:18:13:D7:99:C0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:b5:01:a8:1e:d8:71:0c:d3:96:f1:64:9f:63:a1:58:65:
         d6:04:87:80:3e:88:20:e0:6a:05:8c:2f:14:55:06:e6:cb:59:
         87:45:fa:21:09:e5:e1:d0:0b:18:26:c1:03:07:8a:56:ad:17:
         48:a6:08:18:d8:e3:72:e9:be:93:b5:d3:86:eb:3d:9e:dc:ee:
         e0:ad:4f:99:67:9e:c8:9d:3e:1c:de:4f:a5:cf:5c:e4:da:d4:
         1a:a1:20:4a:b0:b5:f9:bb:d2:59:4a:a2:64:cf:64:4e:1f:dc:
         bb:36:fa:bc:59:7c:01:27:a8:77:c1:56:d2:2b:9c:d5:3d:81:
         ce:a3:58:28:8a:a8:65:97:90:54:da:38:4c:da:da:38:24:b5:
         0e:81:a4:11:b1:23:25:5d:54:3b:48:d6:e4:23:44:0e:78:37:
         fa:12:a8:3d:28:09:5f:32:91:fa:e7:18:6a:9f:15:09:84:07:
         cb:b1:0a:1f:3f:6d:e1:9c:08:98:6a:e2:49:ee:14:79:d7:92:
         63:71:c2:f7:df:e8:61:39:02:69:3b:e6:d9:90:73:36:12:2a:
         22:0e:63:c7:14:4d:3d:72:9b:1e:bf:87:05:06:b6:ae:6f:d2:
         b2:73:23:92:fe:2c:81:46:66:f1:d9:5e:45:72:e5:e0:5e:5e:
         85:f8:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:13 2024 by rpki-client on console-ams.rpki-client.org