Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
File:                     8ca33817-b7b1-3448-8920-6e02588cebe8.roa (raw, json)
Hash identifier:          tQEKQE4ahCbEXFyQh56EGKaESFamg7PIGZiU8j+DJ48=
Subject key identifier:   F5:92:A3:6B:37:35:C9:DC:7D:3B:53:67:85:BA:64:FE:1A:62:DE:F8
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F43285845A428CF00ECD106B55F64D558
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        193.149.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:cf:00:ec:d1:06:b5:5f:64:d5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=5fdac893-13db-48cb-bc37-6a991638b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:32:fa:15:a6:28:5b:c3:58:37:6f:23:61:
                    9a:2e:c7:7a:6e:3c:9a:06:02:e0:15:b8:b9:dd:74:
                    af:cd:33:2a:3a:5c:aa:64:7f:6d:66:98:20:8a:73:
                    3f:ef:13:6c:c5:18:e9:aa:55:8d:88:a1:99:df:9d:
                    54:8f:eb:51:16:4f:39:86:56:ba:87:b2:21:a3:e2:
                    23:24:80:ef:22:49:52:20:e6:1b:75:e6:3e:c2:35:
                    86:b8:78:72:cb:05:81:90:9c:75:7b:80:bd:b3:27:
                    46:8b:14:4c:91:f3:93:46:76:1a:ab:54:9c:14:27:
                    f9:33:6d:56:4a:f0:ca:0b:b6:01:59:9b:49:df:3c:
                    94:65:86:2e:84:62:ff:b4:2f:38:2f:00:f2:8a:50:
                    00:11:32:d6:67:bd:02:ba:24:d4:74:94:dc:7c:67:
                    07:43:2b:68:37:76:25:45:0d:fb:1e:1c:e0:5d:ad:
                    fe:c9:43:a1:3f:96:3f:28:33:f2:ca:9c:bb:80:f3:
                    2f:b7:16:53:29:a0:b8:b1:e4:82:dc:23:81:d0:a5:
                    a9:e6:e1:07:2d:3a:7c:67:a8:f4:df:bf:c8:50:39:
                    22:da:1c:07:e5:fa:d2:d7:68:a1:0a:80:22:a9:16:
                    ca:32:20:f9:1e:48:39:3a:c2:3e:5a:eb:31:4e:64:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:A3:6B:37:35:C9:DC:7D:3B:53:67:85:BA:64:FE:1A:62:DE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:00:78:47:74:e6:01:bf:71:56:78:83:a2:42:41:2b:9a:8b:
         3a:fa:62:29:ad:50:c6:75:de:a6:6d:e6:2c:51:01:d5:5f:9d:
         2e:5b:65:2e:50:fe:45:36:8a:ef:e1:d0:ad:8b:73:f1:f7:d3:
         11:60:c8:34:4c:26:b1:ae:53:a4:6a:39:6d:86:86:31:3a:fa:
         a4:db:cb:1b:13:38:70:e3:ab:20:0a:cc:06:b1:9d:7a:83:03:
         7c:da:6c:c0:15:47:56:a5:02:64:69:9a:f8:fb:9f:4b:6d:5b:
         10:43:52:58:8d:1a:b1:48:cf:21:80:90:a8:f1:c6:ab:f2:eb:
         d3:da:cb:27:9b:4b:ea:23:6f:b5:71:17:fa:83:82:68:df:e4:
         bd:a0:12:be:23:f7:b2:9d:10:2f:c7:a7:e5:7d:ce:6f:2a:30:
         22:f4:c2:2a:e1:21:45:4a:6a:81:2d:a3:c9:bb:c8:b1:c9:e8:
         bc:90:ef:b1:e9:38:77:46:d4:f5:9b:a4:96:df:de:b7:39:8e:
         5e:94:fb:77:1d:e9:d2:4d:ef:18:0c:b1:9c:09:ad:20:00:a0:
         28:39:de:36:79:30:a5:ee:b4:73:62:69:72:aa:16:71:ca:f7:
         c7:bf:66:fb:1c:28:3d:6d:bf:81:cf:a6:32:7d:ea:13:08:5c:
         cc:2c:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:54:13 2024 by rpki-client on console-fra.rpki-client.org