Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa
File:                     29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa (raw, json)
Hash identifier:          zZjM1TY3QbH2XGFJQ+2nFr8RQ9D4XcipSWvBZOXu3Uk=
Subject key identifier:   06:D6:E1:6B:EC:83:3B:2F:B4:5C:B1:05:9A:7B:C7:D6:79:66:74:19
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858453FA807265A8C35E2224C6160
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     13445
IP address blocks:        144.196.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:07:26:5a:8c:35:e2:22:4c:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=77b9bb33-16b2-471e-85b7-c44dceb321df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:01:8b:74:ce:cf:8f:8c:7d:7b:45:1f:a3:
                    ea:09:fa:ab:22:a9:61:bb:0f:15:9d:39:c2:a9:89:
                    49:26:84:67:01:8b:24:fb:a5:14:d9:a6:5c:7f:7b:
                    84:ca:22:da:d1:d0:52:48:75:c7:78:ea:a9:d3:59:
                    27:97:8b:18:ad:f0:39:74:3f:02:66:a4:d3:21:c9:
                    1b:6b:f3:48:b0:d4:e8:82:9a:e8:fd:d8:f0:53:13:
                    40:d4:6c:0f:a5:dc:a9:0f:42:35:c4:70:f4:fd:2b:
                    1b:61:f7:a0:93:fd:3f:f7:2a:12:99:a0:08:ba:f3:
                    1e:4f:60:39:18:42:6d:68:c0:4e:b4:20:89:6b:82:
                    68:c1:dc:44:32:d2:16:61:95:b5:a4:7b:39:27:2a:
                    74:87:b9:84:51:2f:b5:44:5b:34:a2:d7:98:45:90:
                    64:c0:36:21:23:fc:05:b1:cf:81:7c:1c:e9:35:9e:
                    4d:89:69:de:50:4d:0c:59:78:0a:bb:04:6c:43:e9:
                    1b:73:a3:e7:32:c7:16:e7:58:48:b1:bf:bb:af:ac:
                    2f:4c:88:3d:33:dd:ae:54:6b:30:d7:72:71:e6:d2:
                    d1:f6:72:4d:9b:d1:08:2c:bd:94:22:bc:03:e6:80:
                    08:44:84:da:38:43:b1:ff:de:f5:27:1a:70:22:49:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:E1:6B:EC:83:3B:2F:B4:5C:B1:05:9A:7B:C7:D6:79:66:74:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:81:5f:cc:18:f5:ba:02:a0:1b:d4:71:16:96:ed:0c:7a:37:
         45:d9:dc:d7:1c:4d:77:93:3b:fe:f3:31:c5:f7:e0:09:f5:74:
         c2:ce:3b:0d:c5:f1:9c:d5:7e:23:a1:64:1f:87:bd:c6:a2:17:
         04:e5:f9:01:6d:36:52:ff:41:55:31:26:5d:2b:6a:f8:8e:e7:
         b3:92:d1:47:15:ec:06:f5:0b:b5:db:92:4f:33:63:e1:bb:aa:
         d3:6f:ae:c2:11:75:6f:76:7d:06:50:9f:24:b8:9d:fa:5f:03:
         d8:cc:ef:78:0e:33:38:8d:12:75:6e:3c:a4:61:02:82:f4:12:
         8e:37:0d:f0:21:0c:7f:5b:e7:7a:42:fb:04:be:33:cf:e4:77:
         00:79:37:68:59:25:4f:3e:73:b0:c7:12:32:30:e3:ac:82:0c:
         34:1a:86:7c:79:a6:7a:52:e7:7a:05:8a:76:db:fc:00:72:17:
         d7:77:61:1b:54:1c:6d:2f:7a:77:6f:0d:77:91:b7:a6:f3:30:
         94:bb:21:62:88:4b:37:4a:3b:5a:39:28:01:e0:fd:eb:ac:d2:
         0d:43:c2:78:7d:89:be:50:27:df:c0:ac:e6:65:5f:bb:61:ee:
         ee:1a:41:e8:a8:7f:cb:4f:47:a7:06:0c:7e:d7:8a:e1:76:cb:
         8c:6d:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:46:13 2024 by rpki-client on console-fra.rpki-client.org