Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa
File:                     842a56a6-b6a1-3310-a883-8f339b98db65.roa (raw, json)
Hash identifier:          e8xdENEgMVBxS7OT6kgiRNh0/qWoPoUFxm0GQzgfn4Q=
Subject key identifier:   33:48:6E:45:71:D1:D2:54:DC:6B:BE:3C:CD:55:D7:A9:91:C7:B8:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858459044CE39A036758745BBF830
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa
Signing time:             Tue 16 Apr 2024 10:01:07 +0000
ROA not before:           Tue 16 Apr 2024 10:01:07 +0000
ROA not after:            Mon 15 Jul 2024 10:01:07 +0000
asID:                     20940
IP address blocks:        184.51.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:44:ce:39:a0:36:75:87:45:bb:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 10:01:07 2024 GMT
            Not After : Jul 15 10:01:07 2024 GMT
        Subject: CN=8f261827-5801-474d-bd3b-a0e6037937a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:d3:e0:c2:26:7e:21:67:72:d8:5c:fb:0b:
                    80:97:f2:de:9c:c3:48:49:25:1c:ed:1b:52:13:7a:
                    7d:0c:41:32:8f:16:e5:05:12:fd:d4:ff:3e:33:f7:
                    9f:fb:a3:96:ba:5a:82:bf:dd:fa:02:5f:60:24:2f:
                    17:76:0c:9d:ab:f5:df:57:95:ba:e4:90:16:8f:f9:
                    8c:c6:c8:1b:d8:49:26:0d:36:b2:66:70:81:2c:b6:
                    53:f8:24:da:5d:86:f3:b1:ce:9d:1d:e7:ad:68:81:
                    70:f5:18:62:a3:68:3d:c3:bc:d1:4d:a1:fd:17:dc:
                    1e:18:69:6a:1a:5f:a8:8c:80:a7:00:5c:f5:06:06:
                    f3:3f:74:e8:e0:87:3d:31:59:f7:eb:e8:55:ad:fb:
                    eb:bb:03:54:ba:3c:c6:e7:5b:dc:ce:8e:3d:7f:99:
                    b0:44:80:76:86:23:7a:b9:6e:97:26:73:aa:44:52:
                    bd:06:b3:2b:cb:e5:72:f2:0d:00:33:85:4d:70:23:
                    51:77:d6:8b:eb:60:3d:b1:ac:d2:35:7e:fa:70:65:
                    80:d1:1c:6b:87:0d:bf:aa:1a:9d:96:e1:e4:51:89:
                    c6:86:ab:b1:2c:f9:d0:e3:dc:f3:23:b4:72:b7:05:
                    69:ce:c5:16:b6:03:df:d9:9d:67:e6:94:11:ed:ed:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:6E:45:71:D1:D2:54:DC:6B:BE:3C:CD:55:D7:A9:91:C7:B8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842a56a6-b6a1-3310-a883-8f339b98db65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:f1:bb:eb:de:6d:83:d3:0f:13:76:29:06:19:b7:95:5b:
         12:bc:1e:c4:92:8c:13:fb:17:03:12:68:86:25:72:cb:43:2a:
         b6:84:3c:83:3d:3b:d4:00:0e:3c:c6:ea:df:f2:56:01:0f:8f:
         c8:a8:1a:e2:6c:10:c7:4b:cb:f2:9a:ca:76:75:f1:7b:f6:a6:
         eb:6c:bc:6f:2b:33:89:94:da:e3:a5:32:0b:74:29:d0:3d:af:
         00:fc:24:20:65:de:b8:bb:c5:14:e4:77:07:88:1c:e2:59:c9:
         5d:fc:87:eb:b4:55:24:75:96:14:da:df:8a:13:59:9e:e4:0b:
         3c:5a:45:82:77:50:40:86:9c:16:4d:56:7b:ca:ec:5e:97:94:
         c9:58:64:ad:0c:ed:85:ee:a9:49:e2:79:4c:c4:f3:ec:31:02:
         1e:86:cb:f5:66:db:de:dd:fc:58:c5:5a:23:85:11:e2:bc:8b:
         21:6c:f7:75:9f:bd:9c:b3:e9:23:f3:c8:42:ce:a1:bf:cd:51:
         49:b3:7c:df:0b:91:2c:28:03:0e:26:34:98:29:5a:d8:97:a4:
         37:96:76:3f:f2:19:01:4c:36:86:2b:23:d1:fb:cd:50:26:2d:
         3f:5e:45:e3:0c:20:df:24:45:df:27:ad:11:7f:c9:e5:9c:d4:
         bd:bb:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:56 2024 by rpki-client on console-fra.rpki-client.org