Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
File:                     eac293e3-1805-34d4-a60a-cdd9145a0f52.roa (raw, json)
Hash identifier:          G3AUBHjAr8xS51bbhecK/4mKseUhdt1DT9/jch5hP/0=
Subject key identifier:   F9:4B:8E:0C:AD:AE:D1:FE:15:B2:A3:4E:34:EB:0D:F2:CB:99:D8:E5
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584535E29EC4DD5A81D65E118380
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     13445
IP address blocks:        144.196.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9e:c4:dd:5a:81:d6:5e:11:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=1a3b3942-aa41-48c3-b04e-3e37a1cfa144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:6a:0c:7b:76:91:d3:02:f8:b2:53:29:85:
                    4b:b8:02:a4:30:03:c8:2f:3c:1d:eb:a2:54:57:70:
                    11:55:1e:98:51:3d:08:de:aa:dc:a5:3d:97:8e:ac:
                    72:8e:4d:1b:79:35:4c:bc:87:af:eb:cd:84:07:d6:
                    a0:d8:b0:4f:b7:65:03:d0:10:cf:38:3c:47:00:04:
                    69:5b:d7:57:71:a7:9e:d3:07:a2:a0:73:da:53:43:
                    1c:d8:c1:86:2e:c9:e3:46:d7:4b:0d:4d:20:ec:40:
                    72:50:e6:86:1b:6d:a3:67:ec:7f:02:3a:70:ba:49:
                    3a:54:0b:3e:86:5a:b1:61:9d:9e:ec:ae:e7:ed:b9:
                    58:1d:ad:be:da:b3:16:04:66:6c:f8:de:7e:08:ea:
                    ba:dd:e8:b0:78:a9:83:9d:17:48:55:2a:07:58:05:
                    c1:ff:73:dc:ac:87:78:bf:25:7e:4e:17:9f:dd:63:
                    8e:be:c1:91:90:a4:06:41:5b:ff:e8:06:8b:ec:9f:
                    bb:e3:65:c6:6a:81:2e:02:7f:bf:89:9a:0e:ea:1a:
                    3c:d9:c1:09:34:da:8b:15:fc:92:b9:38:ea:b4:89:
                    16:40:d7:9d:e1:84:79:a0:51:6d:73:18:13:d9:67:
                    94:09:d0:1d:50:c0:b7:6b:e7:01:8f:80:75:91:bc:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:8E:0C:AD:AE:D1:FE:15:B2:A3:4E:34:EB:0D:F2:CB:99:D8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:70:28:e5:36:dc:7e:85:31:ea:fc:f2:7d:a1:49:4a:33:
         33:38:1c:c0:03:06:08:06:e7:a8:79:f8:b6:7b:73:30:44:f2:
         39:89:72:50:bc:27:6b:63:0f:4a:a5:8c:c2:8b:39:8f:63:fe:
         ec:c1:5a:3a:f5:93:f2:ab:3c:95:ec:8b:0d:72:d9:c7:21:cf:
         91:b1:81:e0:2b:92:95:33:ec:8f:e5:e9:67:47:e2:f0:97:bb:
         5b:0a:8e:3c:f2:7f:92:84:b7:e0:af:25:5c:e2:5a:12:f9:4e:
         80:81:c6:af:2c:7d:b8:44:41:54:4b:1c:b4:a1:1c:72:29:62:
         5d:9b:7f:fa:da:a8:4e:10:17:cd:82:aa:c5:8a:24:5c:c4:c2:
         2b:3c:bd:c1:06:ca:d0:e0:25:e7:e9:b7:36:be:b1:f5:03:0e:
         b0:79:90:c7:44:8d:27:e7:34:08:28:e7:6b:36:dd:08:f9:e8:
         2f:1f:ea:13:c3:f9:a7:87:d6:37:46:d8:0d:0b:07:91:8e:89:
         ec:ff:43:38:37:ea:ca:1a:ee:2e:14:9a:3a:08:51:2f:6d:9c:
         88:56:d8:3e:4c:5d:93:f7:e9:98:45:bc:fc:ed:8b:d9:f4:d6:
         36:99:fa:52:62:c2:45:09:fa:85:bc:40:90:28:50:31:18:5e:
         d1:d8:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:03:01 2024 by rpki-client on console-ams.rpki-client.org