Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/7db8ade2-5ed8-3b0f-870d-e96cc50a9ddc.roa
File:                     7db8ade2-5ed8-3b0f-870d-e96cc50a9ddc.roa (raw, json)
Hash identifier:          o79FAWsDKKfvuv+sWljwBraeWjvmJArUMGrCqKwdL2Q=
Subject key identifier:   1F:AB:0E:D1:E6:6E:A1:41:E2:A1:23:77:88:A1:95:D1:C5:74:41:02
Certificate issuer:       /CN=80713a6d-ea31-48fc-a530-e2898cffb87a
Certificate serial:       010D0C9F4328584571E86D8FD4A833B373F3B580
Authority key identifier: BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/7db8ade2-5ed8-3b0f-870d-e96cc50a9ddc.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        192.132.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:6d:8f:d4:a8:33:b3:73:f3:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80713a6d-ea31-48fc-a530-e2898cffb87a
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=24c728fb-c7a6-4f73-80e9-4185d5eb9d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:e7:f4:0f:60:87:9b:fa:7d:fd:f7:da:38:
                    d3:b9:4b:8b:9b:e2:d6:a3:55:ca:7e:bd:da:e3:ee:
                    c1:6e:a8:58:34:42:30:c6:71:be:22:6d:95:ed:0e:
                    50:9e:ba:52:bc:df:33:27:29:bf:d0:76:e2:3e:d5:
                    f0:af:c0:5a:6f:0c:66:78:3d:a0:2c:bf:9e:53:d8:
                    9e:bb:b4:69:16:0a:b5:99:05:02:f8:7c:b4:6a:f5:
                    f5:74:e7:e0:3b:0e:a8:96:4e:50:43:d8:f0:e0:95:
                    99:59:26:f1:e2:17:3d:7b:8b:ad:f0:2e:fa:f7:e7:
                    fc:05:00:3a:6c:91:f3:a4:8b:f4:39:16:c8:e9:c9:
                    59:1c:67:d7:72:45:54:5b:fc:ce:7f:51:07:b0:fd:
                    f9:eb:53:25:47:d6:3e:ea:66:6b:17:9c:0e:74:85:
                    11:6b:89:55:57:4f:16:be:f7:45:7d:f1:ee:67:37:
                    f2:ee:fa:aa:14:2b:d8:db:2d:5d:fc:e4:d0:84:3d:
                    bb:f1:11:84:d0:4f:ea:10:f7:90:74:a4:ef:f9:7d:
                    e6:3f:f5:3f:4c:62:78:ca:9b:c6:03:48:d9:3e:9e:
                    fb:50:8f:88:2a:69:0f:dd:84:a6:69:8e:7a:f7:20:
                    85:1e:4c:5d:a6:a5:08:93:f9:c4:6c:3c:ff:34:93:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:0E:D1:E6:6E:A1:41:E2:A1:23:77:88:A1:95:D1:C5:74:41:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/7db8ade2-5ed8-3b0f-870d-e96cc50a9ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl

            X509v3 Authority Key Identifier:
                keyid:BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8f:69:72:b3:d2:47:b0:b7:dd:71:30:cb:19:bd:da:35:45:
         51:6a:cb:5d:0d:9a:43:4e:d6:5f:7a:df:f7:c0:b7:ea:7c:8e:
         8c:8f:17:78:d2:fc:a5:25:2d:89:92:ab:e5:18:73:b1:20:0f:
         07:66:80:71:8d:a5:8c:20:7c:93:83:dd:a2:eb:ac:60:5b:96:
         95:0d:cb:b2:65:ed:6e:6b:be:c0:ed:05:e8:a0:85:72:fc:4e:
         63:8e:d9:ff:e0:b8:6c:c4:49:79:69:b0:2b:5d:3d:8f:f2:d5:
         f2:c0:6e:4b:58:c5:aa:b8:8a:62:33:15:0d:51:35:d5:17:a0:
         dd:29:a7:1e:82:25:07:ff:2e:02:65:d4:ae:25:15:3a:0c:d1:
         58:7d:fd:48:91:03:17:74:94:27:ba:f8:9f:38:40:30:63:8a:
         aa:4d:cd:58:f1:0f:49:83:e3:15:81:ee:2c:bf:ec:10:a3:65:
         e1:19:61:2b:0e:0b:b0:54:73:1a:b0:9a:9d:f8:81:e9:c5:af:
         71:48:3a:01:f0:04:45:c8:0c:f0:bb:03:45:bb:e1:53:1f:c9:
         2b:fa:5c:ea:69:62:2d:be:a3:58:35:14:b8:dc:38:49:db:f7:
         59:ea:da:0b:39:f2:1b:80:b4:cc:bc:d0:15:42:23:ea:86:fb:
         e7:0c:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:22:35 2024 by rpki-client on console-ams.rpki-client.org