Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4121434c-3e5d-3963-8d68-6961a7a8c292.roa
File:                     4121434c-3e5d-3963-8d68-6961a7a8c292.roa (raw, json)
Hash identifier:          sL2tLD+A8ZbZJLzqp4fexU5pJCkPzoIkLQzNOlF5/cA=
Subject key identifier:   B6:F9:92:ED:53:A2:DC:DA:97:6C:B8:15:C5:C7:E8:02:E0:0B:E1:54
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AC10221A940605C6174C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4121434c-3e5d-3963-8d68-6961a7a8c292.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397231
IP address blocks:        192.100.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:c1:02:21:a9:40:60:5c:61:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=51d1712b-097f-4528-8286-2a36b9a074d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:97:d3:87:22:8d:7b:3f:b6:d1:4c:72:94:
                    a3:a2:7a:eb:66:e6:17:34:48:f7:f1:3f:c2:45:c4:
                    b5:23:27:25:56:f9:7e:f8:07:26:6a:1c:f5:e6:7f:
                    4e:26:6b:d7:52:78:b5:32:0e:65:b9:cc:bb:2d:b1:
                    89:71:7b:d2:cc:9d:65:7d:34:47:53:72:28:f1:95:
                    6f:45:4f:f2:93:68:1a:c1:b8:2f:5a:db:4d:13:dd:
                    4f:92:9b:a4:7e:15:9a:d9:b0:c2:d3:06:0f:a1:11:
                    fa:15:5c:28:c0:b6:49:3a:c2:84:4f:62:d4:32:9a:
                    d3:6a:a1:d6:8f:c1:6b:30:ba:c7:ff:08:cf:b9:0a:
                    e8:59:1a:22:30:ac:9d:eb:1d:8f:5f:95:90:b7:ba:
                    13:53:6e:9f:85:eb:19:08:8f:6b:64:9a:e3:9e:de:
                    73:9d:bf:65:dc:56:c2:5c:3c:82:f1:70:af:7c:af:
                    0f:96:d6:ab:3b:5f:4d:4f:8b:ff:10:1a:9a:b3:5b:
                    9a:11:c0:61:4c:57:d4:69:71:3d:b0:61:88:f6:f9:
                    a8:da:6a:ca:8f:da:ce:a4:2f:a9:3c:2a:99:af:0f:
                    e8:78:45:8a:de:32:f2:29:b4:66:39:ef:1e:0c:46:
                    6b:2c:eb:9c:b7:17:09:df:03:08:49:93:a4:57:4c:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:92:ED:53:A2:DC:DA:97:6C:B8:15:C5:C7:E8:02:E0:0B:E1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4121434c-3e5d-3963-8d68-6961a7a8c292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:82:21:c8:b2:2a:78:3e:1d:19:f2:7e:d0:62:67:d3:a3:
         6e:a4:fe:48:b0:4e:7c:02:ad:fa:68:6e:8f:8e:0f:7f:9b:58:
         db:c1:71:9d:3d:32:7c:d5:4c:04:b4:76:d5:b9:d6:2e:97:72:
         03:30:b5:d1:0e:84:dd:7d:71:e9:8e:52:a6:0e:ef:0a:ec:1b:
         93:a0:f5:2a:29:0f:fe:c0:9a:63:1f:60:3d:8d:e1:23:09:06:
         a2:50:84:cc:66:74:c8:de:09:91:07:ec:23:cd:23:8b:1e:54:
         ca:d2:36:8e:48:b3:bf:69:9f:64:2c:f5:b7:ca:52:6a:5d:9a:
         88:78:9d:34:e4:84:7e:1b:d5:47:c8:34:08:25:4e:1b:24:02:
         08:63:e9:4d:91:3e:a9:23:92:97:06:fd:1d:80:00:0a:dc:63:
         e1:91:06:74:f0:ae:95:c6:7d:50:19:d8:05:b6:86:ad:f9:06:
         ed:cd:53:db:e2:de:b3:b7:23:8d:7b:eb:c9:3c:db:2d:fd:8e:
         4e:4c:f9:c1:0c:b0:9f:fe:ec:26:56:49:2f:0a:47:8d:de:b8:
         44:5f:68:24:00:60:ce:07:9a:03:90:a4:26:5b:ac:7a:1b:a4:
         9c:e2:f9:ab:62:d3:8c:09:2e:54:05:60:22:8e:06:31:16:3f:
         f0:50:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:25 2024 by rpki-client on console-ams.rpki-client.org