Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/ddff2ed6-121d-3e87-97a0-e9a95f297b61.roa
File:                     ddff2ed6-121d-3e87-97a0-e9a95f297b61.roa (raw, json)
Hash identifier:          A41KT0g/QITuBtHcoZLi7LcC6HWprzFQoqHhp1HntA0=
Subject key identifier:   4A:45:B8:51:6A:AA:12:E1:FE:70:1E:2C:86:C9:3D:C4:78:90:AB:BB
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F43285845D39E6611BE5B20D9F5B00BD0
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/ddff2ed6-121d-3e87-97a0-e9a95f297b61.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     22612
IP address blocks:        199.193.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:66:11:be:5b:20:d9:f5:b0:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=67c99e13-9d0f-4ffa-90f9-c225c81d521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:18:20:78:c5:43:88:3d:86:f0:87:a7:e8:
                    d5:a2:d9:e9:d3:ad:e5:e9:08:6d:06:4d:50:95:cc:
                    24:d2:7f:2c:71:e4:e6:c2:29:7c:d3:06:3b:91:c0:
                    53:ab:f1:dd:28:36:3b:1d:d9:63:f5:e7:b0:01:01:
                    0c:84:98:bd:27:13:98:ce:b4:9a:39:96:e7:1b:95:
                    ab:d6:ad:b6:02:06:8b:30:77:99:9e:02:de:f6:0f:
                    7f:85:90:76:9e:fd:97:8e:08:ea:dc:3d:49:b6:d9:
                    d1:22:a3:d3:6f:d2:5a:8c:f2:d9:0a:2e:9c:fb:c0:
                    39:57:cd:22:e5:2a:c6:07:ff:99:88:6a:b5:92:05:
                    24:ca:a8:4d:0d:84:dd:ba:1e:cd:fb:68:f8:59:f5:
                    4b:3e:d1:f3:af:6b:46:0f:61:f1:12:23:cd:66:bb:
                    5c:a6:e3:a3:9d:49:09:77:ba:e9:5b:8d:53:a8:c2:
                    d1:96:c7:ad:3f:6a:02:68:30:41:95:4d:e6:96:48:
                    e7:84:49:99:cb:4b:66:53:69:d2:e0:ad:be:50:0b:
                    d8:ec:ec:a4:63:a8:e5:85:62:92:8a:3f:bb:c3:05:
                    19:83:c8:b2:ef:e2:f3:30:99:6c:91:a7:7f:04:1b:
                    e7:04:7e:e9:69:62:8b:07:91:94:dc:5d:27:60:4a:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:B8:51:6A:AA:12:E1:FE:70:1E:2C:86:C9:3D:C4:78:90:AB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/ddff2ed6-121d-3e87-97a0-e9a95f297b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:72:11:fc:e2:48:61:d4:70:d7:69:d4:72:41:02:83:ca:
         7f:0a:b5:33:8f:6d:b9:0d:1c:ee:2a:91:87:18:bf:64:fe:4a:
         88:7e:99:ff:9b:3f:d5:8e:0e:21:49:7a:6c:e4:ac:70:2c:b6:
         53:3b:43:61:fd:fd:45:3b:00:62:9e:06:09:87:75:59:24:ca:
         1c:79:54:f6:90:d1:84:f6:1f:21:a7:a5:a0:69:48:79:ad:b2:
         50:9d:bf:7a:26:ba:9a:df:57:5e:b2:a1:4b:88:02:89:3c:28:
         a6:7f:ca:06:40:a7:1c:be:94:14:8a:f6:70:81:26:42:92:d6:
         ac:c5:35:8e:94:3a:32:e6:43:e2:8c:40:f6:44:de:0e:c2:23:
         6a:66:ac:1a:81:f2:4a:71:b8:35:4e:18:7c:28:bb:de:91:a0:
         92:b1:94:15:32:b8:28:32:98:23:f2:5b:b6:c4:eb:0d:a7:4d:
         e0:53:04:71:60:7d:e2:99:64:7e:c2:9c:92:ec:1f:be:d2:75:
         bc:b9:60:d1:a6:5b:20:c4:11:54:b2:a9:a7:48:ff:e9:d2:6b:
         2d:98:fa:a6:80:9e:07:7b:00:e4:ab:2e:35:f2:c6:c9:fb:2e:
         d3:45:f8:ad:46:63:33:3f:af:b2:b7:44:b8:e5:d8:e5:69:d5:
         de:dc:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:35:52 2024 by rpki-client on console-fra.rpki-client.org