Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa
File:                     dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa (raw, json)
Hash identifier:          Z77ODkgIBbWnDJ0ZO+KJX4HldMwczjfaSDUUEKMMvGI=
Subject key identifier:   1C:25:DE:B4:49:64:68:86:5B:06:8E:C6:C2:15:0E:3B:60:06:C7:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845964AAA0BA15A48089FF12940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa
Signing time:             Thu 18 Apr 2024 13:47:46 +0000
ROA not before:           Thu 18 Apr 2024 13:47:46 +0000
ROA not after:            Wed 17 Jul 2024 13:47:46 +0000
asID:                     16625
IP address blocks:        184.87.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:4a:aa:0b:a1:5a:48:08:9f:f1:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 13:47:46 2024 GMT
            Not After : Jul 17 13:47:46 2024 GMT
        Subject: CN=04dce155-0a21-4765-ad70-37ffa4d957bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:bc:62:51:a8:53:ea:73:8b:db:ff:a2:84:
                    b2:ee:a8:dc:bc:b1:ec:73:e6:44:b3:22:32:a7:e2:
                    1e:00:78:70:3c:b0:02:a7:97:0f:00:5b:bf:6f:aa:
                    b4:24:6e:62:49:cd:a2:d7:55:c6:9f:ea:cb:3a:76:
                    24:05:aa:8f:8c:70:c0:90:ec:d2:31:9f:ac:d0:77:
                    80:f0:bb:06:c6:23:5e:ce:7e:ef:12:01:05:e9:3e:
                    07:02:cf:f8:22:da:c2:b7:63:f4:ca:32:3e:0d:a4:
                    0a:dc:17:77:89:f7:e9:fd:10:67:dd:1e:41:ee:5e:
                    37:16:41:21:a4:83:6a:35:5a:3f:92:ac:25:a4:76:
                    f5:f2:d2:21:7e:29:82:f9:90:ce:54:d2:cf:14:28:
                    e9:2b:5a:04:7d:dd:c5:ce:85:e3:9b:b6:d3:85:7a:
                    19:7a:7f:b4:ed:ab:c7:b9:06:b3:2f:8e:7d:0d:14:
                    65:de:14:0e:48:ef:ea:38:28:93:72:ce:dd:e7:6d:
                    93:f0:a0:52:84:1a:3e:dc:71:9d:f7:6e:1f:48:f6:
                    bb:fc:53:22:63:3f:63:19:d8:0b:18:88:78:ab:91:
                    1d:44:28:ed:b3:94:b8:e8:ff:62:25:2c:e4:ca:d9:
                    10:c4:dd:29:93:db:e0:0b:9e:65:25:f0:c8:80:77:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:DE:B4:49:64:68:86:5B:06:8E:C6:C2:15:0E:3B:60:06:C7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcab4539-c269-34e5-bd0e-bf91c4337c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:01:14:33:c9:df:e3:ce:c5:fc:5c:05:b8:84:1b:8c:0c:
         e2:a8:60:aa:ad:7c:4f:2d:4e:be:fb:a0:55:a7:73:38:5f:b5:
         87:4d:f8:e0:6f:71:35:3f:16:03:23:0f:ca:e3:f4:63:d1:9f:
         6c:14:f1:ab:01:81:3c:8c:7a:d0:75:10:6d:ce:6d:dd:88:32:
         ce:08:0b:ab:b2:70:29:c1:cd:75:96:f3:2e:e4:fc:7c:97:f5:
         14:c5:7f:84:fe:16:bc:6f:f0:9f:12:1b:9c:1d:54:e2:28:6e:
         d1:b9:30:b9:ae:e9:2e:80:a8:13:f3:56:d4:ee:55:07:c3:6a:
         e6:c0:9d:bc:d6:44:6f:7e:77:75:72:9e:45:16:7b:77:2c:32:
         1b:5d:58:d2:9d:49:0e:9a:46:71:c4:52:96:be:ae:76:4d:6c:
         b9:1b:eb:7d:05:cb:20:2d:9c:8e:1f:72:f5:83:1f:ff:c2:d2:
         8b:6b:b9:fa:3d:05:81:39:ec:c5:4c:8f:76:82:ce:8e:ad:04:
         2e:a4:21:7c:f3:d5:34:97:b9:60:06:2b:a6:d5:7e:82:46:66:
         65:66:af:64:7a:4c:f2:ce:6b:e9:0c:d4:33:9e:35:c5:eb:a2:
         da:d8:19:84:73:14:f0:b9:c8:eb:bb:68:90:ed:d2:ee:a3:af:
         5e:8f:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:03 2024 by rpki-client on console-fra.rpki-client.org