Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c6156409-cb04-3360-b65a-e02ca59901ad.roa
File:                     c6156409-cb04-3360-b65a-e02ca59901ad.roa (raw, json)
Hash identifier:          YXux/33IPnsQAzhRWph2+BR2nNHGsKWc30X4MBWGZ9k=
Subject key identifier:   AB:C8:76:17:44:FA:9A:BC:BF:05:E9:8A:CF:DE:A3:6D:90:E4:2C:06
Certificate issuer:       /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72
Certificate serial:       010D0C9F432858450EEAD09FDE0CAB10C33D99C0
Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c6156409-cb04-3360-b65a-e02ca59901ad.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     400304
IP address blocks:        193.149.164.0/24 maxlen: 24
                          216.181.107.0/24 maxlen: 24
                          2606:a8c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d0:9f:de:0c:ab:10:c3:3d:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=e51c0877-fe06-41ad-970c-3eafe225ec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:6f:2d:d9:f6:cd:cb:f2:14:2b:75:07:d5:
                    ec:25:24:c0:e2:e4:a1:b8:7e:64:e0:1d:c1:01:a5:
                    04:aa:a3:c5:71:73:44:68:3a:7c:5c:41:47:19:af:
                    38:08:ca:69:1c:62:07:1e:3e:77:e9:c6:d8:ed:2f:
                    3b:28:db:0f:08:61:10:c1:75:b5:e0:3d:27:39:b7:
                    8f:77:88:4d:f9:de:28:2b:8f:f7:4c:b3:11:3c:77:
                    51:b9:5a:a4:eb:5d:e0:24:b7:81:7e:bb:96:ae:ec:
                    52:98:8b:88:31:ec:cd:59:19:e1:cd:b8:71:98:b6:
                    88:76:58:f6:ef:85:98:61:77:33:2d:eb:2f:fc:d4:
                    61:4b:a3:bd:3f:24:3a:a1:de:56:9d:fa:04:15:d9:
                    ea:dc:ba:14:6c:29:f0:a5:b0:a9:5a:c6:e5:b6:d0:
                    b7:62:ea:91:15:30:70:5e:b2:36:87:19:13:a3:37:
                    21:7b:22:1b:d5:66:28:62:8a:cd:28:5e:bb:aa:4a:
                    00:6b:f0:9a:d3:29:3e:55:1e:46:e4:fb:ce:2d:14:
                    9f:13:d7:62:3c:ef:e4:7d:36:75:d7:e2:8f:f2:cd:
                    48:61:28:82:ea:58:aa:d3:48:92:2c:f9:89:c8:11:
                    3e:29:54:30:61:c9:97:d3:99:e2:31:f9:dd:c6:bc:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:76:17:44:FA:9A:BC:BF:05:E9:8A:CF:DE:A3:6D:90:E4:2C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c6156409-cb04-3360-b65a-e02ca59901ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.164.0/24
                  216.181.107.0/24
                IPv6:
                  2606:a8c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:59:a4:4d:11:dc:4b:02:56:6c:d6:ff:ee:3f:6d:fc:6a:
         f0:41:f6:e7:c4:1f:f4:15:95:3f:0c:43:c7:dc:db:3b:a6:e6:
         98:29:5a:63:d7:f4:9b:25:4e:3a:8e:62:06:4b:8b:a5:e8:3b:
         03:dc:31:04:0f:6f:ac:2d:a5:d7:65:85:c8:ee:4a:94:b9:e7:
         6b:22:de:27:c5:ad:23:31:31:83:41:90:42:0e:b2:94:35:56:
         32:28:f5:9f:12:54:11:c1:25:f7:d6:69:f9:69:86:cc:3d:f2:
         e4:20:a2:da:bc:e9:0c:59:86:39:6a:e9:8a:3c:b1:c7:5b:75:
         36:ff:5d:03:ec:56:7b:16:d5:72:e9:c9:fe:89:46:f8:fe:71:
         7c:0b:6a:5b:82:16:a4:64:a5:31:21:ad:98:4b:82:b6:24:b3:
         05:58:27:05:f6:c9:c0:0f:dc:62:aa:92:5c:18:98:42:2c:b7:
         03:0e:5a:7c:6b:30:10:02:b2:2d:b8:33:e4:bd:d0:2a:2b:2f:
         b9:3c:3c:4b:d0:6e:4a:93:00:a6:84:18:b7:5d:04:bb:1c:05:
         8d:6a:f0:8b:9a:50:e2:9f:f6:55:1a:76:76:21:f6:1a:e3:ed:
         a5:44:a2:bb:1e:6e:2d:2c:c5:44:f3:37:61:b7:fe:83:b5:8b:
         e6:d4:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:14 2024 by rpki-client on console-ams.rpki-client.org