Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/b944ae33-24f7-37b0-987a-bbd271025580.roa
File:                     b944ae33-24f7-37b0-987a-bbd271025580.roa (raw, json)
Hash identifier:          IF7bBsroRxsSfM3ad/4OEGjK+cVg9HZS57AmK6QRFWo=
Subject key identifier:   E0:3A:C5:64:E2:D6:97:BC:75:2E:0C:79:5A:ED:5F:A8:C3:21:6F:B5
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F432858459D2DEF1C44638D4A01F861C0
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/b944ae33-24f7-37b0-987a-bbd271025580.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        199.188.94.0/24 maxlen: 24
                          199.188.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ef:1c:44:63:8d:4a:01:f8:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=e01b34ad-10d0-48a6-af19-748a559f5963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:9a:54:24:08:45:55:5e:e7:03:6c:34:9a:
                    22:b5:ef:4e:0c:2f:d6:c1:cf:a9:a3:fa:5f:ee:c1:
                    2f:4f:25:90:cb:18:be:1c:a9:19:8d:76:9a:20:94:
                    14:84:16:7f:b2:2e:e0:86:cc:fe:83:6e:05:82:b4:
                    6b:59:e6:3a:d8:9d:9e:73:94:18:bf:5b:62:b2:a8:
                    21:69:2b:78:7e:fd:b2:33:09:92:44:ad:fc:d2:51:
                    fb:10:cb:2a:ae:8a:e0:53:0c:53:7c:a6:ba:db:cb:
                    21:25:21:f6:40:55:07:5e:c6:01:fa:7a:45:5e:85:
                    9b:8f:65:4d:e5:9b:d1:70:23:aa:5a:76:c8:1d:5a:
                    7f:a6:72:77:70:b3:02:d3:ac:07:80:f0:31:5a:30:
                    35:4d:c6:bb:53:42:c5:87:08:71:3c:bb:84:4b:5d:
                    be:5a:86:81:ce:9b:7e:21:ce:f8:b2:a7:94:11:89:
                    a7:6e:79:81:29:11:2e:78:a9:88:42:c9:21:51:40:
                    f0:fe:4a:2e:06:57:68:ed:fb:18:35:28:81:4f:ef:
                    06:d3:2c:28:89:59:0d:c5:ba:fd:56:ae:26:b1:d0:
                    a8:73:08:05:e2:e4:23:31:2f:e2:38:d3:a0:00:11:
                    59:f7:5e:2d:58:79:d0:5c:d8:c8:21:e3:bf:68:45:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:C5:64:E2:D6:97:BC:75:2E:0C:79:5A:ED:5F:A8:C3:21:6F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/b944ae33-24f7-37b0-987a-bbd271025580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:ea:ac:c1:c4:c3:15:64:28:6d:b1:94:43:d0:51:d4:30:
         3d:a7:da:51:15:4e:e9:b4:ca:d7:fd:65:f9:28:42:da:a4:29:
         22:c5:6c:12:d4:bf:ee:2c:2f:4d:44:7d:c8:e0:eb:4b:05:9d:
         56:c4:77:b2:11:81:f3:13:34:03:93:cd:f6:8a:61:d7:bd:06:
         b6:0d:f4:03:c2:63:95:be:d4:a7:a6:eb:14:03:af:25:34:50:
         f1:42:d7:8d:ca:c4:6f:98:5a:7f:8d:70:41:7b:01:d0:a3:fa:
         5f:39:41:56:fe:24:1d:6d:29:29:33:8a:20:8a:7b:79:42:de:
         64:ce:a9:e7:3e:df:ba:e5:c0:e7:04:2f:a6:3b:5f:15:fe:2c:
         87:17:c5:d6:71:b0:ed:73:e7:ba:6b:30:7f:3f:ac:8c:b7:cc:
         ef:09:45:af:89:f7:25:7d:80:8d:be:58:61:00:9f:8d:d1:2c:
         b2:de:9a:60:1e:28:0a:60:81:fa:75:8b:4a:5f:7d:e8:0d:ee:
         eb:03:d8:e5:64:ea:11:c3:87:82:da:f7:00:70:2b:1b:83:f2:
         e5:ca:7f:c2:45:9e:6f:3b:75:96:24:93:de:55:0a:c3:a7:54:
         d3:ab:ad:8b:09:48:7d:21:57:0f:f7:9c:92:ed:1a:b8:50:aa:
         44:c0:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:01:11 2024 by rpki-client on console-fra.rpki-client.org