Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
File:                     589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json)
Hash identifier:          V9GuJuDJmpQOlyPftHAoTAF1KWx7sw/iw1bk52zksBo=
Subject key identifier:   40:E2:1A:AA:84:CB:9A:2C:DA:57:6B:E8:88:DD:D6:28:32:BD:52:33
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F43285845304D37B9FB1B891FCE4A0780
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        199.201.127.0/24 maxlen: 24
                          64.52.111.0/24 maxlen: 24
                          192.153.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:37:b9:fb:1b:89:1f:ce:4a:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=a7b0abfd-f746-4b08-82a3-009a003e5e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:5b:3e:5f:f6:7b:cc:b5:31:72:43:21:92:
                    7f:23:f6:81:8a:63:a1:38:87:14:26:fa:99:30:71:
                    f9:7a:22:67:5f:67:0a:3e:44:98:3d:41:04:d8:51:
                    50:ba:d9:c9:d6:b9:57:ff:cd:4a:18:ef:f5:7e:6d:
                    a0:48:41:1a:9f:ba:96:51:03:17:62:41:47:f2:65:
                    3c:6f:e0:a9:9e:e5:6a:c9:41:3f:15:c4:55:de:c7:
                    1a:7c:58:09:31:dc:05:f8:5c:39:36:90:1a:30:df:
                    25:fb:b0:76:fa:5a:cc:75:e3:9c:be:2c:c2:92:3e:
                    79:ea:9c:a2:1c:cd:98:70:f2:f1:ca:4e:5e:48:cf:
                    f9:e2:aa:10:22:a8:0c:fc:7b:a9:8d:2e:38:fd:73:
                    7d:a3:e1:e1:d8:34:ab:77:37:93:fc:b1:fd:b9:82:
                    e4:56:6f:ba:3d:d8:e6:8e:e3:31:27:2f:34:db:fc:
                    48:ac:e0:b9:14:d3:a8:0c:3d:d7:9c:f7:18:62:3f:
                    a1:c0:8f:2d:f4:3e:b1:48:f5:1b:62:3c:d4:73:5e:
                    f1:66:38:dd:36:03:38:3e:fb:d3:8a:f3:49:7b:cb:
                    c1:36:f7:fe:d8:be:fc:f8:35:c1:41:d5:f3:50:d1:
                    6a:d2:07:4c:cc:5b:95:51:6b:c8:70:4f:c6:23:c7:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E2:1A:AA:84:CB:9A:2C:DA:57:6B:E8:88:DD:D6:28:32:BD:52:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.111.0/24
                  192.153.76.0/24
                  199.201.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:eb:01:b4:82:8a:3e:62:74:77:f6:1a:a3:3e:ed:db:2e:
         3a:4e:32:be:09:62:ce:57:6c:63:28:fd:d6:b6:04:33:07:61:
         c1:a7:a9:20:ae:d9:88:27:3d:85:dd:f8:33:72:f4:c9:d1:92:
         c9:c2:84:f3:13:e7:c4:1b:62:0e:f7:24:15:d4:8c:ab:64:3d:
         bc:18:0b:e5:58:42:5f:d1:6b:84:fc:fd:e2:57:0e:69:ba:80:
         87:7d:21:c7:78:6d:7f:83:ed:46:38:f6:8f:3b:95:7a:df:a4:
         df:af:97:5f:eb:a2:4b:91:76:9b:97:7f:40:22:d4:33:e9:ba:
         d8:e9:a2:99:57:37:60:ab:32:3e:62:1c:83:2b:b6:1d:36:fa:
         e5:db:80:94:e0:3f:d3:8d:96:a6:26:98:40:b4:b9:a1:1a:ad:
         07:5a:a5:79:a8:95:ba:17:f7:af:fe:83:e5:52:74:12:7e:01:
         95:8f:a7:f4:d3:d1:82:41:66:f1:73:0e:4e:5f:c3:e9:6d:84:
         fe:ea:b3:5f:0a:ae:26:db:98:8f:d9:24:98:fa:4d:5b:c0:d8:
         8d:14:aa:0e:29:f8:17:13:0b:7e:98:56:8c:78:12:73:b1:a7:
         37:1f:3b:40:34:86:bd:fa:81:df:8e:1d:be:db:ab:d2:c3:d1:
         af:5b:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:00 2024 by rpki-client on console-fra.rpki-client.org