Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa
File:                     fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa (raw, json)
Hash identifier:          /87mmrQ3sEX3uEin4pDemiH3VbyIOEoV7s74gDVrzsU=
Subject key identifier:   39:D8:0B:9B:5C:41:2B:40:53:6D:8C:2B:02:E5:64:EE:16:80:5B:82
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584511B5817B5787C36706F11300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397234
IP address blocks:        198.133.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:81:7b:57:87:c3:67:06:f1:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=ca03473e-b884-4e50-a423-2de8ee60c8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:00:47:0c:0e:4c:e2:05:69:51:65:14:38:
                    68:17:b4:83:ff:2c:f6:cf:03:90:79:6a:08:55:a8:
                    f7:f5:f6:c4:dd:20:c9:09:36:7d:71:53:b5:7c:4a:
                    d9:64:9a:48:f0:ca:2a:6c:c6:11:cd:4a:4d:60:77:
                    d4:22:5c:28:c4:e4:13:0e:2d:f4:15:8b:21:5c:0b:
                    d3:c0:73:5d:9b:5c:a0:95:14:f7:34:b7:c9:57:38:
                    0f:44:51:2f:d4:d2:23:bb:72:73:5e:16:cd:10:be:
                    19:b8:fa:cf:ec:8e:8f:76:24:bc:aa:ed:e3:71:0a:
                    dc:fe:84:f9:bd:3b:4a:f1:d1:f6:c0:73:78:f5:ff:
                    20:33:89:75:15:b7:6d:4c:b9:5f:0e:5d:b4:85:7d:
                    91:00:bf:99:1f:14:1e:4b:2a:02:d5:de:c9:90:eb:
                    9b:2c:70:4c:a2:3a:89:f0:ae:c4:69:cf:88:42:ec:
                    4b:9f:97:f9:96:eb:ad:30:fd:7a:bb:35:90:a1:c4:
                    81:45:19:64:2d:e2:2f:fd:14:9d:d1:86:42:60:b3:
                    e6:63:46:67:d2:fe:3d:06:1c:c6:94:68:13:e6:88:
                    39:52:a4:92:3d:72:67:f1:a3:92:b7:71:1c:80:5e:
                    43:01:6d:e7:2c:b6:dc:58:84:a3:14:8f:fa:51:08:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D8:0B:9B:5C:41:2B:40:53:6D:8C:2B:02:E5:64:EE:16:80:5B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbe710e8-c099-31d9-acfb-6e80887bcc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:35:94:8a:7c:b8:d3:48:f4:21:39:51:13:c8:4a:be:88:1c:
         83:c8:f5:af:63:bf:29:95:2a:c7:fd:9a:81:52:89:de:ea:1b:
         82:cf:ee:57:a2:36:00:49:42:db:61:16:73:6b:d4:36:7c:d1:
         e1:b1:51:76:d2:5a:69:67:f8:9e:ab:e1:4c:19:80:95:3e:a8:
         19:6a:cc:c9:8c:4b:5c:d4:08:48:cd:ae:dd:b6:2f:79:a8:c3:
         b4:62:22:1a:53:07:0b:59:02:b4:27:ba:b2:d2:84:3b:40:dc:
         3b:6d:f9:82:d3:4d:df:5b:bb:ea:01:d9:69:9e:3e:73:a4:a9:
         eb:c8:6d:5b:12:da:5a:6a:a5:3c:84:43:7b:e2:d4:65:83:4a:
         d7:f7:0b:8c:29:3c:b8:77:0b:03:a8:fd:c4:4a:68:5b:f6:14:
         07:2e:b3:a8:f8:91:8e:cb:0d:9f:a9:75:c7:63:45:11:67:cf:
         1f:81:b4:af:38:58:92:a1:ad:8e:b3:3d:d5:57:e1:f6:cf:cf:
         bd:ec:f2:81:cf:1d:b5:9d:5a:5c:25:8b:db:01:5e:a1:25:0e:
         4b:b8:7a:09:ec:c4:77:cd:2a:94:0f:ea:0e:ea:0f:e0:98:73:
         86:39:b2:6a:e5:40:9c:7a:50:56:89:40:4d:0d:83:f8:9f:eb:
         f5:ee:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:11:50 2024 by rpki-client on console-fra.rpki-client.org