Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa
File:                     c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json)
Hash identifier:          z86K0haYQuFmvMhWcyHvoU6IgYcwOrMwykzLxu2gVeU=
Subject key identifier:   F1:A9:7E:A0:6C:89:93:E0:1C:C6:79:60:49:6F:1F:62:E9:50:C3:61
Certificate issuer:       /CN=ba2a1fed-6973-4607-a297-20f3f241a739
Certificate serial:       010D0C9F43285844FE2AE7F9DC7C79264AA7A580
Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.207.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e7:f9:dc:7c:79:26:4a:a7:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=f43bc5ea-675f-4e17-98d7-65a2aabc9d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:d3:ec:c5:5b:1c:f7:85:6b:53:26:41:e9:
                    b9:3a:4c:0d:0a:6a:44:8d:91:ae:d3:2f:40:7b:d9:
                    0c:57:53:5b:16:f3:cf:db:ed:b6:4d:83:0c:db:cf:
                    c1:f7:7b:9b:e9:88:e0:c2:84:01:e5:d9:f5:20:40:
                    30:d0:37:96:90:c2:aa:41:ab:18:57:88:7c:71:cd:
                    c2:c4:e4:84:dd:06:79:ff:0e:1c:5e:d0:18:44:05:
                    8e:da:62:a1:74:04:b2:da:31:ed:c2:b1:27:8d:c3:
                    2a:7e:64:75:b7:b9:53:72:f9:56:4d:bf:6a:d2:5c:
                    72:04:66:51:5d:05:4d:f9:cf:ac:5e:52:65:62:50:
                    e2:fa:51:87:68:e0:ea:68:cb:10:d3:5c:40:84:07:
                    95:0e:ad:a0:84:18:0c:4c:8d:1e:04:43:ef:78:b3:
                    ca:de:4f:4a:42:be:d5:bc:67:93:9c:28:6e:38:d1:
                    5a:ac:62:d8:9f:30:bc:ed:9b:e2:ab:74:68:b0:ac:
                    fe:2f:3e:c2:53:41:c5:92:a4:11:f8:33:79:d9:dc:
                    5d:d5:cd:4c:db:51:d4:3c:7b:f6:8b:86:09:4c:3e:
                    65:c2:bf:ca:19:b7:19:ab:94:79:25:db:94:73:c9:
                    01:f0:da:52:55:b4:ca:9c:9c:3b:ee:ed:19:f1:fd:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:7E:A0:6C:89:93:E0:1C:C6:79:60:49:6F:1F:62:E9:50:C3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl

            X509v3 Authority Key Identifier:
                keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:21:18:76:04:ee:c5:6c:a8:e3:56:86:57:a6:93:8b:5f:
         fc:0a:50:b3:d4:06:88:f1:b2:aa:5a:4c:61:38:db:1c:63:68:
         c9:1f:da:c4:b1:d3:33:b2:89:63:de:10:c7:97:84:f1:f6:a5:
         3b:f8:97:50:63:13:e4:a7:63:b0:bd:90:94:a5:39:07:dd:64:
         06:74:69:4f:6a:c1:cd:1f:ac:d1:a3:f0:88:cc:dd:0b:db:f5:
         ab:8e:5a:d7:fc:4e:e1:93:e2:0f:61:49:aa:1d:46:b3:93:e7:
         bf:a0:82:9f:45:1e:7d:03:e3:cc:a9:71:8b:cc:76:f4:a8:14:
         ad:fd:b9:cc:c5:39:31:bf:03:12:76:ed:e2:52:ee:d0:bb:45:
         fe:12:76:b2:37:a9:a9:ad:93:a3:23:a5:78:15:a4:ff:74:6a:
         41:6e:51:43:9f:9a:fe:df:8c:69:95:60:09:49:e7:fa:a4:9b:
         62:b4:08:be:f6:c5:41:98:3f:00:45:18:30:28:0e:a5:fb:40:
         6f:db:37:3a:82:3c:59:33:10:5b:94:a1:96:9e:9b:ae:94:8b:
         df:49:08:0e:0a:be:be:50:da:ec:bb:77:d7:2f:00:2f:e3:b6:
         b2:89:64:d3:ac:cc:7c:fa:38:fa:32:b9:30:81:44:64:1a:cb:
         e1:6c:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:32 2024 by rpki-client on console-fra.rpki-client.org