Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
File:                     fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (raw, json)
Hash identifier:          O0JWizgbB02RGI0m9fYngQjWiUcXm8FeLpVlYoDKiNc=
Subject key identifier:   08:EE:00:81:74:58:3E:FC:78:5D:F6:79:2F:45:61:06:2E:AF:49:4C
Certificate issuer:       /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
Certificate serial:       010D0C9F43285845F253EF7F28BDFCC2CDF90300
Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     398949
IP address blocks:        192.64.206.0/24 maxlen: 24
                          192.64.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:ef:7f:28:bd:fc:c2:cd:f9:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=9d55d39d-2bd8-44f6-a6d5-72d9222d1418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:4a:64:1b:73:e5:d4:9c:a7:4a:b9:1a:a8:
                    2f:fb:7b:9b:bc:e3:2b:a5:42:b0:c3:08:99:d6:20:
                    b9:a3:93:ff:9d:e1:13:43:7b:56:03:71:28:67:2b:
                    29:c1:4c:ab:36:4e:09:63:72:44:b9:64:58:8a:cc:
                    90:38:e8:f9:fe:82:fc:ac:af:b3:4f:ad:26:b7:a7:
                    a7:fc:70:1f:25:b8:09:fd:58:eb:39:83:95:bb:6b:
                    d2:86:7f:bd:34:ce:50:3a:a8:a7:b4:b4:32:19:48:
                    0d:1f:e5:de:81:31:a8:d5:07:a0:96:33:d1:67:f7:
                    f5:bf:82:15:ad:7a:0b:73:ea:d7:f8:23:ef:db:e9:
                    d5:b8:48:c5:48:1a:e0:0b:64:9f:96:97:b9:d7:d7:
                    af:9a:36:0f:2d:48:50:6c:9f:32:f1:fd:94:55:8e:
                    08:8c:dc:75:39:dc:d8:c0:47:7f:dd:6f:8a:b5:2b:
                    f3:67:88:29:c5:3b:0e:78:56:44:f3:aa:7e:d9:7f:
                    10:a0:32:ea:c1:b4:19:79:11:7a:0a:82:9d:16:38:
                    e8:ff:05:80:8a:9d:11:02:ee:13:da:ec:e4:25:8f:
                    41:8a:56:03:cb:4b:c8:40:a9:6b:e2:70:b1:72:f5:
                    d6:46:3a:e7:8e:1d:72:b4:f8:a7:62:6e:e7:47:73:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EE:00:81:74:58:3E:FC:78:5D:F6:79:2F:45:61:06:2E:AF:49:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl

            X509v3 Authority Key Identifier:
                keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:65:e9:0f:72:5e:84:5f:cd:a1:6d:be:86:96:f3:58:2d:90:
         f8:6b:c8:54:74:56:43:5b:4b:7e:32:c2:e9:ea:2d:1c:dc:37:
         57:39:47:25:75:fc:c9:74:45:58:60:ae:c5:ad:f0:1e:0c:36:
         8d:3e:c3:48:4c:c2:42:bd:10:1a:2a:3c:ec:d2:81:4c:14:40:
         40:03:0f:ef:ce:25:1c:39:71:c8:16:25:73:11:e6:3a:06:52:
         fc:91:e1:64:6f:e9:d3:ae:d6:5c:b2:46:9a:22:6f:43:fa:25:
         a6:58:48:20:77:d9:34:4b:95:fa:d7:81:88:07:69:b8:43:e5:
         11:30:d9:ff:a5:f3:a1:39:4b:e5:b9:92:b2:24:0c:65:62:cb:
         fa:9e:a0:6a:bc:a4:d9:16:ca:0f:7c:db:da:5e:3e:59:65:80:
         aa:22:34:28:70:6a:f7:86:77:d3:a5:45:24:28:4b:65:7d:ad:
         ae:44:2b:83:62:16:37:10:fc:07:1a:55:88:2d:a6:37:7d:60:
         12:f7:8c:cc:71:ac:ac:e2:53:f9:4c:af:22:21:70:e8:ca:24:
         dd:02:02:98:46:42:5c:5f:c2:49:e6:b2:5a:48:c9:71:27:77:
         99:b4:86:de:a2:61:4f:93:04:c8:e7:7f:03:4a:a6:45:5e:ad:
         2d:37:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:47:07 2024 by rpki-client on console-fra.rpki-client.org