Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/a31128f1-6e8d-36e3-a07e-af3fdd5c04fa.roa
File:                     a31128f1-6e8d-36e3-a07e-af3fdd5c04fa.roa (raw, json)
Hash identifier:          xiahS8TMowuQiz5E9JcjTG5arDVJco6OJwIfSilM9Ug=
Subject key identifier:   FC:4A:B2:4F:B5:28:8F:B6:93:DC:59:0B:C1:64:BC:FE:9F:0A:AB:93
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F4328584524EB75DA9EB0279CEB618D00
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/a31128f1-6e8d-36e3-a07e-af3fdd5c04fa.roa
Signing time:             Fri 08 Mar 2024 23:09:36 +0000
ROA not before:           Fri 08 Mar 2024 23:09:36 +0000
ROA not after:            Thu 06 Jun 2024 22:09:36 +0000
asID:                     14618
IP address blocks:        198.147.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:eb:75:da:9e:b0:27:9c:eb:61:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: Mar  8 23:09:36 2024 GMT
            Not After : Jun  6 22:09:36 2024 GMT
        Subject: CN=503c1415-9c75-4029-a0d2-dba9f48568ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:fe:ef:f2:39:d9:bf:fd:88:2c:5a:15:2e:
                    17:bb:0c:a9:af:d5:95:cc:65:ab:08:b0:68:3e:d5:
                    d7:d4:bb:07:4d:2d:ca:8d:cf:9a:17:cc:b5:f8:6c:
                    49:f5:4d:9f:58:09:2d:cf:03:0c:f8:d8:32:86:b2:
                    f1:93:9a:86:f7:b0:9e:f1:fe:2b:c8:95:53:7b:86:
                    47:9d:23:de:b7:98:25:14:7a:43:3c:07:63:cd:46:
                    96:c7:43:fa:cc:93:b7:53:4f:2a:a9:39:35:c6:b9:
                    a1:e6:f9:f3:ba:07:4f:6e:e4:f7:62:24:0e:3d:5a:
                    ce:8e:90:ef:23:b3:58:ef:0f:db:c6:72:f4:9f:97:
                    d6:42:ac:0b:1f:a9:f7:9d:9a:b3:47:27:6e:34:2e:
                    ef:10:71:d8:d6:af:eb:0b:0e:f2:e1:a3:70:fd:59:
                    57:e9:7c:2a:fe:75:83:91:e7:12:bb:cd:55:9e:2d:
                    2e:54:49:4a:3c:85:3c:d4:40:51:29:a2:36:43:e0:
                    f8:95:89:6b:f8:1d:ce:9d:e2:23:2c:a9:d0:e6:e4:
                    39:d8:4d:6b:1d:6a:8c:f8:66:5b:ea:b9:92:18:01:
                    b2:06:b0:68:c6:f0:50:bb:cf:64:20:2a:83:d6:f9:
                    c3:1b:39:d9:a9:39:98:6c:f7:63:80:a0:06:24:6b:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:B2:4F:B5:28:8F:B6:93:DC:59:0B:C1:64:BC:FE:9F:0A:AB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/a31128f1-6e8d-36e3-a07e-af3fdd5c04fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.147.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:0b:d0:f8:3a:17:7c:e9:66:b5:83:93:9a:73:40:f0:f8:
         3e:aa:a6:4c:a3:86:d5:29:5c:71:28:1e:0c:4d:ad:49:b3:04:
         7f:96:c3:80:73:3a:c8:6c:19:03:6b:4f:07:73:3a:f3:5b:67:
         eb:b8:72:a6:d4:fa:cb:f3:c4:2f:47:91:98:48:8c:47:89:4a:
         5d:62:11:ed:aa:62:2f:e9:30:e3:73:db:7c:6f:8b:b9:3c:fe:
         ef:9a:e8:45:63:82:4d:a6:e3:68:f2:16:bd:83:4e:28:a7:5d:
         6d:29:b2:02:0d:4b:92:f4:c3:c0:76:60:3a:71:a9:9e:30:48:
         43:55:70:04:91:af:15:1c:21:f3:57:4e:a5:44:db:c8:9b:ac:
         6f:01:fd:da:5c:36:bb:a2:60:13:58:98:be:4c:c0:5e:8f:8a:
         b2:0a:e3:d3:0c:05:36:80:3d:5b:6f:4b:da:02:65:43:2f:46:
         08:f7:34:b8:4a:cc:f1:44:6f:b9:20:64:44:8f:a3:34:9f:c0:
         da:5e:86:f4:16:70:b4:46:78:0d:bc:32:56:1d:8f:84:73:54:
         1d:35:d1:81:ea:35:6e:a1:cc:cd:fd:65:1d:f2:bd:db:76:01:
         25:41:46:ce:90:c6:89:de:f4:ed:71:2a:cd:2a:26:f0:dc:62:
         2b:49:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:05:55 2024 by rpki-client on console-ams.rpki-client.org