Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa
File:                     8ae67e8a-104d-3a84-8b85-450caa25862f.roa (raw, json)
Hash identifier:          Ob32FbArVxdTIURvpgwVgmlmTXg9CW8uO6t5Z5UD3Vw=
Subject key identifier:   2A:18:49:63:20:C7:64:18:C5:B4:BA:60:A3:22:63:48:0E:98:C0:C3
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F432858460B73FF47DF2689EC7D297F40
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa
Signing time:             Thu 30 May 2024 13:00:34 +0000
ROA not before:           Thu 30 May 2024 13:00:34 +0000
ROA not after:            Wed 28 Aug 2024 13:00:34 +0000
asID:                     32402
IP address blocks:        199.7.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0b:73:ff:47:df:26:89:ec:7d:29:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: May 30 13:00:34 2024 GMT
            Not After : Aug 28 13:00:34 2024 GMT
        Subject: CN=27d83c8f-85e0-4f10-8ed6-336160c9f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:7b:79:7e:9b:da:41:8b:a6:46:12:cd:53:
                    2e:34:e3:1a:d1:9a:d7:7e:dd:fb:f6:0a:91:8b:9b:
                    d6:35:70:50:e5:ac:00:ee:94:ae:bf:a5:a4:ed:37:
                    24:e7:63:3e:30:f3:b1:72:21:04:e7:52:07:f2:10:
                    aa:d6:bd:d6:fd:80:c1:88:a2:d0:50:21:c3:ca:23:
                    df:96:a1:76:30:9f:77:2e:b1:42:c7:7b:73:1a:00:
                    0e:1e:1c:a1:fa:65:a9:b6:1c:76:20:f6:90:f5:24:
                    f5:47:10:8e:c7:e9:34:0c:05:a1:a0:b8:43:02:ac:
                    f0:56:c6:4f:31:8d:4b:3b:72:38:1c:4b:40:bb:ab:
                    68:75:33:68:7d:32:b4:d7:3c:c4:2f:72:50:89:cf:
                    9a:0a:44:40:38:7f:78:bb:40:e3:22:0b:6d:0b:50:
                    15:a1:d6:c2:95:30:71:30:cd:d3:65:f2:b3:f0:1c:
                    fe:03:9d:6e:bd:a8:cc:e0:14:6b:6d:3e:b9:31:ee:
                    37:5b:15:c5:7f:ec:97:2e:d2:2f:8c:75:78:63:34:
                    25:0e:89:86:58:a8:60:63:90:9b:f7:5a:51:83:0a:
                    8a:37:10:4e:31:ff:ec:05:dd:63:33:2d:56:e9:96:
                    80:08:a4:92:04:f4:59:83:c4:f0:d0:68:36:b5:6d:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:49:63:20:C7:64:18:C5:B4:BA:60:A3:22:63:48:0E:98:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:43:dd:c8:4d:94:fc:0a:83:a0:2d:61:cb:3f:59:5c:ce:c6:
         84:37:c7:c2:c0:c0:5f:32:ac:8f:9c:e8:db:3b:44:db:12:5e:
         35:5c:45:d0:13:db:48:a3:d7:e2:f7:d9:15:94:a7:a7:ef:c4:
         27:0b:a4:7a:8f:62:a9:4f:e3:8a:8b:b4:29:b7:63:da:be:cd:
         c7:50:ce:99:00:3d:7e:43:18:4e:97:43:d1:3d:01:27:eb:70:
         4d:a9:a7:ea:20:94:27:ee:e2:a1:26:e1:1e:c5:a5:cb:51:9b:
         db:b9:71:24:0b:41:a9:e9:90:c8:a7:e1:f6:68:93:74:07:85:
         0d:ea:70:44:1d:d5:c9:85:61:93:95:c5:4b:4d:5b:b5:fc:c9:
         00:a3:0d:48:4f:b6:1d:32:73:de:d0:63:50:12:61:60:e9:5f:
         7a:77:6b:21:61:2c:24:4c:2d:f3:ba:5c:a9:8c:d4:4a:4a:ff:
         a8:f0:7e:c0:59:b0:da:6e:63:f9:f7:06:56:d8:ee:46:b3:ca:
         af:cc:69:52:9f:97:17:fd:f6:93:d0:aa:83:6e:9a:4e:9a:3b:
         37:90:72:b3:40:e6:a4:54:04:8d:1b:80:18:24:ca:b0:a9:76:
         5f:e5:95:92:88:8b:44:81:83:64:ff:54:10:c0:56:7a:2a:6b:
         c6:c9:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:28:50 2024 by rpki-client on console-fra.rpki-client.org