Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa
File:                     c01946b8-c888-36e7-9154-c7906b6fcad2.roa (raw, json)
Hash identifier:          8+OKkw/BrvUDzviJA/lrs00w23Jxt3HdAcKpwk+JUfw=
Subject key identifier:   2C:CF:05:AA:B1:1F:06:66:81:70:1F:CB:BE:8E:D3:C6:56:7B:4C:C2
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285845561A294F94EE36A66BB60480
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa
Signing time:             Tue 26 Mar 2024 13:58:18 +0000
ROA not before:           Tue 26 Mar 2024 13:58:18 +0000
ROA not after:            Mon 24 Jun 2024 13:58:18 +0000
asID:                     19637
IP address blocks:        192.19.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:1a:29:4f:94:ee:36:a6:6b:b6:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar 26 13:58:18 2024 GMT
            Not After : Jun 24 13:58:18 2024 GMT
        Subject: CN=172b5e5b-4d8d-4d75-b672-bd581c00c6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:db:40:ae:0d:50:f4:44:63:93:13:07:a8:
                    0f:85:8c:a8:8c:34:db:4b:e5:ea:77:40:73:6f:14:
                    aa:08:2d:36:1f:b0:45:cd:c9:35:71:97:95:bf:5d:
                    23:fb:a6:9b:51:5a:a2:b5:39:4b:47:b3:6c:c7:e5:
                    d7:80:dd:be:35:4d:83:4b:1e:af:f6:e1:eb:d0:f2:
                    8a:0d:5c:e5:6f:83:6b:5e:54:07:2b:d2:c1:e5:04:
                    c3:ee:85:74:fa:f7:ae:cc:f0:08:2d:32:89:a1:27:
                    aa:5e:2e:8f:02:22:18:38:41:18:0d:33:dc:4c:4f:
                    2e:9f:fb:83:56:b3:fa:87:77:fc:42:81:f4:2e:dc:
                    b7:d2:5c:66:87:07:54:4a:ac:1b:f8:de:e8:fd:67:
                    db:bb:48:43:4b:ea:9b:b7:08:22:ab:aa:29:37:75:
                    8b:1c:4a:a3:c8:57:8d:27:61:54:f1:5e:7c:2d:97:
                    9a:60:67:f8:f3:c7:16:78:fc:f9:32:52:d2:07:c1:
                    99:a5:77:94:b1:64:78:2d:22:68:c3:c0:44:8f:16:
                    7d:c9:06:b6:7b:ca:58:a0:a5:27:d5:bb:08:86:5b:
                    4d:17:d2:5e:ad:bf:dd:e8:64:91:f0:86:54:a0:4b:
                    88:b8:8c:6b:d4:12:7b:5a:b8:42:16:fa:d2:78:c3:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:05:AA:B1:1F:06:66:81:70:1F:CB:BE:8E:D3:C6:56:7B:4C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:f2:c5:f9:29:f0:5d:0b:62:40:7d:ab:33:66:c6:ce:19:
         70:a7:7e:e7:50:d3:6e:47:e3:09:91:3d:10:47:31:12:55:0b:
         48:63:38:66:19:f5:8a:14:df:85:c2:a2:9d:38:fd:a7:f4:5c:
         d7:45:2b:19:40:fe:b0:ef:bb:45:38:ba:94:01:37:7b:9f:f0:
         2e:b1:6a:00:0a:f1:15:65:f2:1b:35:74:8f:61:9a:6d:8d:70:
         01:d4:e1:6e:a2:c9:7e:ab:a1:f1:f2:6b:4d:02:17:5d:9a:9b:
         1e:05:e2:c6:45:fd:ba:55:dc:1c:b8:de:8d:21:de:22:0d:8b:
         8e:24:44:b3:6b:32:1e:8d:b3:55:6f:f7:52:dd:7c:00:cc:3b:
         de:68:11:78:3d:96:bb:07:10:97:7d:a0:5c:5e:d1:98:d9:f6:
         ad:31:88:ab:01:d0:ce:d9:98:af:1d:c1:61:34:ac:f7:21:1d:
         31:cc:4f:33:27:c2:39:4e:34:92:7e:bb:7f:de:81:2d:aa:81:
         9c:1b:85:28:19:46:75:95:57:e4:cd:61:6e:d8:fc:05:ae:ec:
         38:cd:47:be:80:34:7a:e1:77:30:e9:26:73:1d:a4:ac:44:cb:
         f1:97:be:77:7d:1a:6b:40:8d:03:df:dc:c5:7d:8b:24:67:04:
         6b:f6:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:39:38 2024 by rpki-client on console-fra.rpki-client.org