Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa
File:                     1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa (raw, json)
Hash identifier:          CyLV/W1VzNcBJGSi2LuYfcrhHOboNqQZ/tS8jMxlvoo=
Subject key identifier:   BB:80:40:09:8E:57:EE:04:AE:7F:4F:E9:3E:12:C1:C9:20:A5:E2:51
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F43285845E45E803B27BA6291D73CE8F0
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     16621
IP address blocks:        192.149.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:80:3b:27:ba:62:91:d7:3c:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=e7b39bfc-f586-456d-aa39-33622803028e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:1a:fe:cc:b2:69:28:85:96:84:fe:1c:23:
                    45:39:ca:87:6f:a5:64:af:f8:a9:f2:4c:5a:de:dd:
                    46:88:c4:71:08:7a:57:a5:dd:33:c1:3a:37:1f:d2:
                    b3:c9:61:9c:20:e5:43:4e:15:75:5c:da:52:9d:f7:
                    f4:fe:be:11:c3:76:2a:9f:9f:be:83:05:7a:4c:8c:
                    44:59:1f:cb:2c:80:5d:ac:af:98:28:8a:04:e5:d2:
                    65:a0:91:a7:b6:f3:03:c7:52:24:54:08:45:02:c7:
                    fb:5a:a4:ec:21:8c:87:38:3f:85:ca:cf:48:da:c5:
                    c8:a4:4c:74:8f:0d:12:70:24:ae:de:95:44:4c:5c:
                    c5:d5:7b:b1:1a:4b:82:6a:d2:76:53:1f:07:cc:08:
                    b4:a3:ae:59:b4:75:c8:16:b9:76:a2:eb:60:84:81:
                    c5:55:a9:ab:4d:81:b6:fe:36:61:b4:4c:98:cc:53:
                    03:37:6d:56:cf:34:74:da:d6:e1:ad:64:74:78:47:
                    c4:f1:cb:a8:ac:d2:b7:76:58:e0:db:7a:2e:dc:66:
                    86:68:65:2f:62:21:d7:04:f2:66:f9:e5:a5:20:8f:
                    e3:bc:b7:f6:89:2c:55:c8:3e:42:2f:f1:8a:f2:37:
                    1c:8c:33:54:db:05:a1:63:e3:0b:88:9e:0c:32:ea:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:40:09:8E:57:EE:04:AE:7F:4F:E9:3E:12:C1:C9:20:A5:E2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/1a8bdbf9-142d-3ce7-a47c-2f06bf4b7c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:af:67:b8:43:30:45:f3:b3:f2:af:d3:63:5f:92:13:9f:
         80:17:1b:3f:c1:05:c9:f4:ce:6c:b3:98:83:d5:d7:a4:ba:b3:
         0e:c2:6e:e1:ca:8e:9f:6f:63:67:e2:78:a1:35:1b:09:21:79:
         b4:9b:db:c0:66:a3:bf:12:6c:09:b4:f9:51:bf:e3:ec:db:ed:
         47:18:5e:f6:66:7b:19:14:0d:f1:d9:67:98:14:8b:89:37:df:
         c6:61:37:54:f3:a6:bc:e2:02:97:f9:3e:19:86:3e:89:62:d2:
         42:86:9c:e4:4a:f8:41:41:98:05:65:8f:f5:f4:f5:97:03:f1:
         12:71:a2:64:f1:58:93:7d:cb:12:35:ae:7c:ac:58:14:fd:61:
         b9:75:3c:a0:b8:14:9e:7a:95:99:4b:e5:96:55:4f:bd:2f:05:
         3b:7f:30:7d:5d:ae:1f:0e:7d:1f:d2:2c:9c:75:d4:70:d2:01:
         53:e7:9f:82:ef:66:65:49:cf:9c:0d:fd:df:d3:36:38:d7:f4:
         5f:1f:53:a0:99:c7:30:6e:73:33:28:66:b8:9a:68:93:1f:15:
         c0:90:ba:a0:ce:1a:00:e6:ff:55:ee:8d:c9:cc:e0:5c:f1:f0:
         73:40:3b:c5:89:2c:03:16:e0:84:9e:ea:46:a9:19:93:d4:d1:
         93:14:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:43:30 2024 by rpki-client on console-fra.rpki-client.org