Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee38a6a7-ae81-336d-93c1-b2d0b21a4879.roa
File:                     ee38a6a7-ae81-336d-93c1-b2d0b21a4879.roa (raw, json)
Hash identifier:          x/2Hj4Ed0oJwP+0pnFZf95Wtc1I7JHh9mXQ/oF54EuU=
Subject key identifier:   F2:DF:E5:BE:B7:E7:F4:62:34:8B:3D:D6:D9:3A:9D:8F:90:83:F0:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A3CEDF56EF1A5AF094BF7D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee38a6a7-ae81-336d-93c1-b2d0b21a4879.roa
Signing time:             Tue 23 Apr 2024 09:59:39 +0000
ROA not before:           Tue 23 Apr 2024 09:59:39 +0000
ROA not after:            Mon 22 Jul 2024 09:59:39 +0000
asID:                     16625
IP address blocks:        184.27.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a3:ce:df:56:ef:1a:5a:f0:94:bf:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 09:59:39 2024 GMT
            Not After : Jul 22 09:59:39 2024 GMT
        Subject: CN=4f2b7037-fe99-4931-b2f3-fffa271073ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:0f:c0:37:ab:23:05:d7:f2:25:25:28:43:
                    c1:ef:e0:1d:8d:00:60:4b:00:45:03:0b:0c:6a:40:
                    be:33:3f:d7:6d:a5:0f:2e:03:52:56:81:c0:00:fb:
                    51:90:3a:e7:bf:d8:63:3b:1f:52:da:b9:36:b4:ce:
                    08:84:f2:90:b6:af:8e:bb:5b:ef:23:17:b6:85:45:
                    a3:8c:63:21:87:bb:1d:51:66:06:43:20:2f:ce:b8:
                    0b:f1:23:78:26:ae:75:e7:02:91:57:ad:36:07:52:
                    f0:04:77:13:87:7c:6b:c5:e5:9e:aa:b0:0a:97:a8:
                    e8:5e:eb:ec:d4:bd:be:e0:9a:49:27:b5:8f:f8:51:
                    39:f8:ee:b2:df:1f:5a:95:a1:fc:f6:a3:1f:4f:2e:
                    3f:1b:50:2d:dc:69:4b:7b:f1:2a:bd:cc:61:92:6a:
                    53:ea:ec:00:9e:78:f1:b6:84:85:3b:99:06:85:8a:
                    ef:06:1e:3f:f4:d0:ba:a7:88:4d:09:25:7f:0c:d4:
                    bf:d3:c7:f4:8c:20:b9:44:26:47:ce:09:5b:54:14:
                    8c:51:62:73:6a:04:61:78:e4:60:60:c0:a4:96:40:
                    38:22:bb:e0:76:ec:18:35:da:3d:ca:df:c7:ee:b7:
                    ee:7e:84:45:f8:c1:2a:3b:74:73:bb:56:d7:53:2e:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:E5:BE:B7:E7:F4:62:34:8B:3D:D6:D9:3A:9D:8F:90:83:F0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee38a6a7-ae81-336d-93c1-b2d0b21a4879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:73:99:61:79:52:49:ba:c3:1c:ba:14:78:b6:b0:52:d4:
         3b:d9:4f:10:37:18:93:8e:e3:98:3a:29:3f:4c:db:a8:e4:5e:
         66:3b:79:6f:83:c7:40:52:84:0d:6a:2b:89:98:1f:10:90:81:
         91:db:05:ff:88:c7:f1:1d:93:b4:07:f6:7f:b3:66:cc:3a:98:
         f0:ef:95:4f:21:32:7b:23:55:96:41:11:b0:c9:7f:0f:44:88:
         f6:2c:89:76:5d:26:9d:46:db:ca:42:8d:1c:b9:ce:1e:6b:cc:
         fa:70:78:8b:f0:04:67:1f:05:0d:01:1d:14:89:1d:f1:60:65:
         21:5b:e8:74:85:0c:78:ca:2e:24:c6:9c:12:68:2a:34:b7:1c:
         12:08:95:2e:db:8b:a0:67:df:26:5d:4e:9a:0b:0c:42:bc:0a:
         b0:5b:cc:c9:b2:c9:27:67:fc:32:e2:d2:00:49:56:8d:5e:5a:
         31:b0:9f:f4:cf:85:e8:68:16:d0:89:8c:1c:5a:7b:f4:a1:cb:
         ba:b6:52:43:1d:50:ca:45:dd:f4:1f:37:98:91:2a:da:be:7c:
         c0:d5:a6:f3:5a:e4:1a:45:5d:a4:ee:a6:10:8d:16:ef:50:b0:
         e5:6e:1c:fa:24:91:ce:bd:85:f6:92:33:20:cc:c0:bc:79:ba:
         59:62:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:04 2024 by rpki-client on console-fra.rpki-client.org