Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
File:                     f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa (raw, json)
Hash identifier:          RgwyvT4O2pozuJaIokdYSdw8z9Q5A3hOEL/r8hPa+Ek=
Subject key identifier:   24:14:90:E6:94:93:0A:A5:F4:49:2E:09:D1:F1:0D:86:81:FF:17:E1
Certificate issuer:       /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial:       010D0C9F4328584574B31EFB752AED2FAEB56CA0
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        158.51.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1e:fb:75:2a:ed:2f:ae:b5:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=122e1038-9b94-4337-9921-0d76125b3919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:b4:6f:c5:ea:9b:a8:b4:65:93:ca:af:6b:
                    53:d3:f3:6e:45:3f:f4:7b:04:f0:c1:89:2b:c9:f7:
                    23:12:37:ba:8d:3d:8a:fc:07:bb:3d:5b:90:3f:00:
                    d6:e7:6a:1a:b7:d7:95:89:be:5b:c9:30:15:03:44:
                    58:38:55:48:ba:6d:96:f6:de:4f:a1:72:54:ca:5a:
                    92:8e:8c:39:7b:a8:fb:c6:65:06:55:af:85:35:32:
                    da:67:d1:2c:e3:fe:af:eb:06:c6:48:b7:a7:55:f0:
                    d4:57:c0:1d:4d:8f:be:05:da:ae:93:c5:b7:9d:ee:
                    20:e8:fb:58:70:15:40:a2:d2:0d:9d:05:5d:17:40:
                    0c:5e:8d:f0:d4:f0:d5:2c:0c:46:8f:e8:93:93:fb:
                    12:69:da:24:58:29:ae:26:4c:aa:9e:6c:ba:4e:28:
                    e3:6c:b0:4f:4e:e1:9a:e2:88:c7:91:39:54:ee:cc:
                    9a:ef:6d:2a:9c:bb:cb:c4:ae:4b:41:ed:7f:0c:db:
                    a6:de:5e:dc:da:ae:4b:c0:73:74:ff:7b:3a:f7:67:
                    97:72:05:68:23:bb:28:f3:f9:3b:e0:4b:cf:ed:a2:
                    1e:73:4d:c3:2b:7e:a8:ea:d7:f3:a2:e2:02:29:fc:
                    e8:95:62:ea:75:d9:00:d0:ec:b2:d3:a7:c4:df:ba:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:90:E6:94:93:0A:A5:F4:49:2E:09:D1:F1:0D:86:81:FF:17:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:58:f6:15:06:df:be:7f:66:da:71:cf:e2:da:45:4b:b4:
         e5:95:a8:a0:5f:bf:67:d2:71:6c:20:d0:2f:14:a1:70:7f:0f:
         6e:cb:44:45:ec:78:7b:51:b4:79:03:f3:97:08:da:56:d0:e5:
         c8:cd:c4:ac:e2:d4:e8:b8:1a:71:61:6f:4a:75:62:05:bf:b1:
         af:82:e1:2e:c7:01:11:03:14:23:d3:a8:4f:ee:4e:80:6d:57:
         f8:28:90:a0:1f:da:57:ad:68:df:fc:d3:54:c2:4b:e8:31:97:
         7d:0a:f8:99:37:0b:6a:99:f5:fa:59:10:01:40:b3:3e:9c:cf:
         84:e6:75:b5:c6:ec:4d:70:20:d4:0f:94:c9:a7:6a:da:ce:6f:
         4d:ff:25:3f:6f:89:d9:11:69:45:97:df:79:21:45:9a:5e:25:
         1b:be:f4:8f:5b:ab:5c:e7:19:58:86:53:f0:18:ac:e4:c1:ca:
         95:ef:a3:0f:87:9c:50:42:41:7c:df:ae:a2:33:76:7c:ad:5f:
         f6:64:c1:ae:8d:92:7b:65:da:6e:fb:99:5d:25:3a:70:dc:54:
         a0:cc:4c:09:ab:fc:28:0b:63:cf:4f:47:3d:6a:bc:d2:da:99:
         3b:16:d8:4c:14:d6:ee:41:c9:a8:c7:4c:09:fa:37:6e:b7:a4:
         4c:b9:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:22 2024 by rpki-client on console-fra.rpki-client.org