Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa
File:                     d398e187-3fa7-3919-8a37-a9993ff3c633.roa (raw, json)
Hash identifier:          cdHJqqcbxDuz/FOyjTwIw3wl4Zrr6fr/G9radAekt2Y=
Subject key identifier:   5C:46:B3:5B:A6:41:C1:97:55:56:9F:30:FA:47:02:A4:B4:7C:DE:CC
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F432858456C531C6D04A603E6489A6280
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16580
IP address blocks:        131.232.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1c:6d:04:a6:03:e6:48:9a:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e2429556-fd05-4d87-8041-2d9742cce8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:64:01:5e:84:9a:9a:0b:9e:db:4b:6f:1a:
                    0a:df:55:ec:40:e4:34:8b:b2:6b:9e:54:87:99:c0:
                    e4:08:16:6f:8f:4d:22:e3:4b:df:8b:94:81:c6:dc:
                    1a:f5:8f:08:f2:97:f5:9b:93:b8:d7:29:0d:78:5a:
                    2d:ad:e5:0b:90:74:c5:80:7f:76:12:84:97:fd:3f:
                    8b:97:6c:7b:3e:2b:c0:85:9d:5a:72:20:40:22:2e:
                    79:b1:fa:f0:99:a7:34:64:fe:a2:c8:60:2e:3e:e7:
                    7d:f2:54:22:04:0e:56:d1:f5:93:02:99:b3:9c:1d:
                    d4:18:f2:12:4b:c6:8d:6f:19:4f:bd:0e:53:c5:cf:
                    e5:0c:21:4e:f1:17:a8:7d:72:4e:0e:35:5f:f0:fd:
                    48:30:2a:75:5d:a7:6f:f5:81:84:fe:cd:86:68:e4:
                    cf:b4:cc:6d:dc:6f:65:8c:bf:be:b3:67:d5:34:87:
                    a8:56:f9:b3:46:7c:26:6f:67:1f:9b:ec:32:6e:d2:
                    65:cd:91:17:4c:8f:2f:d3:f0:57:70:62:bf:1c:e7:
                    d4:cf:0a:c7:2c:91:b0:6f:d6:6b:ae:18:78:be:ab:
                    e5:0f:34:61:3b:a0:a8:a9:b8:8b:35:29:60:1f:e2:
                    2b:cf:e8:db:95:91:09:a8:9d:55:bc:7b:a9:f0:cd:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:46:B3:5B:A6:41:C1:97:55:56:9F:30:FA:47:02:A4:B4:7C:DE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:be:f9:cf:45:c4:d2:53:94:b4:77:06:f7:ee:fc:87:c6:
         6f:36:c9:b5:17:3e:2b:3e:27:6d:58:8a:55:a3:9b:1e:b2:3c:
         0a:8f:f1:f4:4e:78:3f:37:8a:ff:57:05:ac:50:c7:67:3b:8c:
         b5:0a:37:ac:c8:23:93:f6:00:d3:78:0d:de:3e:61:68:17:60:
         4b:50:a9:8e:9c:8e:bc:df:9e:11:0b:f4:31:7f:0d:0b:ed:45:
         e2:f6:ea:75:18:e0:eb:ca:7e:43:90:55:fa:cb:e6:37:ef:d9:
         3e:a7:25:0c:43:28:e6:b3:42:eb:9c:f1:14:0e:41:0b:ce:95:
         c7:61:cf:bd:8a:54:18:24:57:80:b9:22:7c:e2:89:f9:99:78:
         2f:8f:1d:4b:10:4c:18:2e:55:40:1c:e2:52:9a:ca:0f:40:58:
         0a:9a:91:a7:9a:1b:a8:94:49:f7:e7:c9:79:93:f2:b7:61:f9:
         78:a9:6c:47:a1:1b:cd:e9:03:e6:f1:10:46:02:48:d1:5c:e3:
         79:fd:d8:65:d0:57:d3:2a:a7:08:a4:93:ba:9e:8c:c4:b8:e7:
         d0:f6:f6:57:35:72:03:14:fa:b0:02:d4:2d:14:e4:a5:4d:a2:
         9e:55:e5:83:c5:d6:db:37:c0:92:7f:a0:39:85:15:4b:a1:90:
         bb:ce:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:00:36 2024 by rpki-client on console-ams.rpki-client.org