Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa
File:                     ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa (raw, json)
Hash identifier:          pzqv8ASr5Kd3ERw6WLK3w/Ns1d211bWx/ZvN7X11HlI=
Subject key identifier:   30:2D:03:01:4A:EA:82:3E:C7:A9:0C:B7:F5:FF:DC:F8:16:D6:30:F3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2ABD03B57B77255A99F4D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397215
IP address blocks:        199.7.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:bd:03:b5:7b:77:25:5a:99:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=e5f55151-e668-4013-ac1e-e47ab7135152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:3c:d4:0c:c4:d0:b1:c5:58:68:0c:6b:4b:
                    84:3b:5c:9f:6f:62:a5:4e:06:6e:97:b1:a9:d1:c3:
                    c0:ea:ea:a9:8a:a5:f2:f1:9d:2a:60:c4:37:6e:99:
                    7d:44:61:5e:40:5a:97:9a:1a:85:ea:61:11:5e:3e:
                    57:de:bd:b5:c3:4e:cb:c2:24:7e:9e:94:28:71:36:
                    90:80:21:28:11:17:57:05:90:a0:f2:d3:84:c3:71:
                    51:fc:ab:bd:52:22:2f:04:76:c2:e4:ac:ff:0e:98:
                    62:4d:2f:17:1a:ac:6e:0c:90:0f:b4:09:93:88:28:
                    c4:23:5e:06:aa:dd:52:62:46:cc:d4:b1:b7:1d:76:
                    74:c4:59:73:b9:3a:d9:d5:b8:cb:b8:50:e1:8a:13:
                    93:7c:10:50:20:43:e4:75:9d:72:9f:0e:6c:a2:5c:
                    9e:19:7c:f2:18:b0:0b:08:3d:7a:3e:e7:9a:8d:e8:
                    01:e3:0b:62:cc:2e:48:41:f1:b3:cd:8a:81:d9:58:
                    c6:e1:94:76:77:09:64:4c:dd:5e:cf:40:b3:44:93:
                    b8:2b:89:39:42:26:ea:f9:32:3e:6f:79:8d:88:72:
                    99:7b:e9:c2:76:b4:ff:bf:80:0b:ba:bf:f2:99:64:
                    58:5b:83:ea:45:21:40:7e:0d:f3:7c:c8:da:09:d3:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2D:03:01:4A:EA:82:3E:C7:A9:0C:B7:F5:FF:DC:F8:16:D6:30:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:ae:de:8d:98:12:5c:bb:42:69:5f:cb:8a:94:6d:78:1a:
         cb:e1:68:5f:b9:ac:5b:c7:28:d7:c8:fb:1f:1d:80:f5:5f:f7:
         fb:36:32:70:ee:89:8d:57:6f:e6:99:4b:32:c2:20:18:61:a5:
         ab:82:32:8d:f6:f4:48:8f:49:bb:37:8a:86:47:ab:4b:9a:c3:
         4b:22:61:ba:c1:ac:7c:26:fc:ca:8a:65:c8:04:08:96:2a:75:
         47:4d:e9:9a:3b:ed:bc:60:a7:d0:6e:2b:14:8e:c5:15:ac:27:
         66:9d:6d:e3:19:69:a1:cc:07:8e:1a:66:63:df:ba:3f:4b:ed:
         e2:66:38:2a:31:fd:81:b0:c2:9e:1f:47:0e:89:e7:95:15:30:
         33:87:1c:2d:70:cf:25:92:0f:2a:54:f9:75:7c:44:4d:90:7e:
         c8:e7:cc:65:05:92:37:d8:e7:3f:15:83:66:30:8d:dc:4a:df:
         df:cd:4e:b9:c5:5e:82:8f:25:93:a9:24:c4:7f:d6:3a:42:ad:
         82:23:2d:47:55:35:76:ad:0d:c0:ef:37:fc:08:ee:42:bf:30:
         7b:67:35:11:23:2b:bd:09:a2:4e:e8:27:b5:0b:e5:8e:f4:b5:
         f1:92:bb:c2:cd:b0:be:94:45:f1:f0:bb:b3:b4:11:e8:96:bd:
         b7:a6:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:49:58 2024 by rpki-client on console-fra.rpki-client.org