Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa
File:                     76190616-974e-396f-9255-4aa085cd8597.roa (raw, json)
Hash identifier:          dVl+5/fUpWu0Wpx3hxDm6es8jW4uxCrxoFboBkyVuiw=
Subject key identifier:   11:B6:16:D7:D7:A0:4B:31:67:BE:9D:AB:1D:85:80:00:1B:91:2C:49
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F43285845254046680A375C3A8CB357C0
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     1239
IP address blocks:        209.166.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:46:68:0a:37:5c:3a:8c:b3:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=41f2fce8-7b5e-449b-9aa6-1e1a9b548bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:3f:4b:2b:44:c6:d0:85:b1:5e:51:6f:7a:
                    ed:87:b4:50:05:94:4a:f5:86:99:16:d7:37:2d:8f:
                    33:a1:83:61:1c:8a:c8:4c:11:03:0c:08:54:ae:4f:
                    40:20:42:2b:ee:99:de:d6:01:2a:da:79:c7:05:ce:
                    1d:38:17:b1:e1:06:cc:56:14:09:dc:1d:63:f4:3d:
                    9f:14:05:e0:21:88:e9:f8:56:4f:2a:1a:59:57:cb:
                    16:33:12:f4:f0:e8:92:23:e3:fd:9d:1a:6d:df:95:
                    c9:9f:d8:70:b2:f1:88:98:51:99:c5:95:dd:45:d8:
                    1e:0e:80:cd:4c:6e:6c:da:e6:70:ca:27:6e:65:fe:
                    5a:b1:0c:86:15:4a:1d:39:53:69:0a:a2:1e:c3:67:
                    f6:8c:a6:cf:8e:da:0b:57:7f:6f:7c:af:5c:4d:94:
                    c4:9f:7f:70:e9:be:40:db:71:ef:0f:d1:40:3f:fa:
                    59:ac:30:c1:70:90:44:02:70:39:65:b0:36:3e:57:
                    2e:03:f3:a1:c7:44:77:f4:38:6a:4a:05:52:29:99:
                    3d:d8:c5:c8:50:ef:46:9a:11:9b:62:4f:6e:8a:3b:
                    57:a2:b3:67:fa:ac:70:77:7c:b7:d5:e2:7b:a8:75:
                    fd:17:a1:51:17:6f:ef:b0:a7:e3:1d:8e:e7:e8:5a:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B6:16:D7:D7:A0:4B:31:67:BE:9D:AB:1D:85:80:00:1B:91:2C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/76190616-974e-396f-9255-4aa085cd8597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:63:10:98:7a:fc:9a:a1:3c:9a:ec:54:f6:75:17:f1:52:67:
         65:d1:1b:3e:97:58:bf:90:0d:a8:3f:36:f7:11:b7:b8:2e:c0:
         41:6a:e0:5f:cc:07:ac:f7:fd:35:08:81:9d:e7:09:86:10:13:
         ef:6c:f9:33:9d:02:22:80:ce:90:16:4d:61:ab:9a:4a:4b:98:
         ec:b0:7f:fd:43:2d:fb:49:5e:80:6c:cb:45:a3:c6:ee:10:43:
         6a:e9:ac:cf:2c:67:be:a5:1c:32:f6:e5:7e:e4:16:cc:20:e6:
         ac:4a:28:4a:c6:92:9e:50:dc:17:e9:f5:8d:19:f9:4d:1c:28:
         55:db:0e:e7:05:18:08:a9:de:71:a8:ad:89:40:ea:c0:36:cd:
         08:30:65:c6:08:eb:2a:bd:15:62:a4:24:30:ba:1e:af:2b:ca:
         e5:c2:e6:b6:c4:e0:88:79:d6:08:d4:0a:d9:4d:3a:0b:69:55:
         0b:38:47:fd:30:70:37:cb:d6:ec:62:f2:1b:93:ca:fe:60:63:
         ba:a0:90:25:9d:38:76:05:c1:f4:19:4f:97:75:84:ee:30:ea:
         17:cc:1f:ee:71:b2:ee:07:8c:4f:5f:08:3f:48:5b:24:6d:a0:
         2d:9e:12:84:12:fa:98:b7:30:a9:53:5d:e8:7a:67:28:1c:7b:
         5f:ef:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:46 2024 by rpki-client on console-fra.rpki-client.org