Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa
File:                     59b2e926-b9f1-3016-bc49-ae2d229b646d.roa (raw, json)
Hash identifier:          LxN48aMFXzj5gX+eQ04MgoaXLe9PF7+d384Ku/9mzac=
Subject key identifier:   30:A5:5C:95:45:50:EA:AB:6F:21:CB:2C:BF:1E:69:67:D5:5F:42:F5
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584582A896B26776913A35808FD0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     27281
IP address blocks:        192.184.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:96:b2:67:76:91:3a:35:80:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=95600979-30ae-4e20-860a-408d2b59fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:ec:18:89:e6:fb:2e:a5:2f:2b:34:f4:ec:
                    e4:77:b9:1e:cb:1f:0d:35:04:46:89:84:06:27:33:
                    d1:1e:02:40:cd:91:47:34:43:28:79:8b:4a:a8:51:
                    01:e8:76:5b:ef:59:7a:92:65:7e:48:cb:cb:27:03:
                    22:d0:fa:ab:4d:b2:d4:37:c7:53:7b:32:ab:95:f3:
                    81:e6:cf:bd:47:b6:c9:c2:a3:a2:8d:e6:27:e4:df:
                    59:b2:3c:15:34:22:91:da:ff:8b:ee:0d:f8:57:c4:
                    f6:45:9a:77:63:49:fc:43:8e:bd:06:0c:1a:03:8a:
                    ad:af:12:8a:96:80:5a:81:12:03:8c:63:b7:a7:fb:
                    b7:74:c8:37:97:3f:fe:69:70:8e:8d:10:fa:79:b7:
                    59:32:93:4b:9a:61:dd:7e:00:72:18:1b:03:66:b4:
                    36:08:c9:b8:12:64:7d:df:04:43:26:47:25:de:65:
                    e5:b5:61:09:38:f1:c7:43:1d:16:97:d0:c4:db:65:
                    a8:9c:17:24:29:97:90:27:f4:ba:eb:90:73:3c:d0:
                    69:11:11:95:d1:ba:bc:e9:28:f2:cb:e3:a7:85:d1:
                    bf:c9:c8:fd:d5:4b:fe:d4:6a:f9:fc:3b:b0:cd:c2:
                    d1:87:ef:54:f2:ed:dd:36:cc:5c:01:7e:a7:05:09:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:5C:95:45:50:EA:AB:6F:21:CB:2C:BF:1E:69:67:D5:5F:42:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:30:cc:96:3e:9a:a4:d8:7a:21:4b:e9:67:4a:3a:d0:a5:9e:
         b3:05:e7:5c:14:0a:5b:e5:d7:5b:dc:83:a4:56:bf:8d:b5:66:
         df:b2:0f:a2:57:1a:2d:57:0a:08:55:07:ae:70:54:03:ce:d9:
         f9:0e:01:b1:57:84:4c:9a:46:a2:0d:e8:9c:45:f3:57:69:85:
         f8:0e:53:08:5c:8e:35:03:1e:9d:35:66:64:53:29:21:99:f3:
         51:8c:d8:21:da:8c:32:2c:74:2d:34:d5:fe:61:43:fa:d8:50:
         27:50:d9:9a:0a:14:9e:95:0f:67:67:1f:db:3b:a1:ac:b3:6b:
         c4:8a:c1:12:d1:5a:79:e1:6f:91:98:6f:f6:29:04:15:a4:c0:
         48:20:48:52:31:6a:3a:4a:4d:33:46:4c:e9:60:03:da:9c:11:
         52:af:bb:80:b2:4c:46:13:2f:1e:2c:84:75:9c:4c:a4:c4:7a:
         86:66:a4:6d:1c:61:53:2b:f4:fc:88:ea:1f:10:35:51:6f:2c:
         87:08:8a:a0:31:8f:39:b8:56:9f:ca:82:a3:52:37:82:46:b2:
         98:45:27:98:89:bd:cf:50:c5:36:8c:6e:9e:34:01:74:fc:94:
         3a:89:bc:e7:b3:36:9a:3f:30:35:26:0f:ba:78:54:71:a2:c2:
         bd:62:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:42:17 2024 by rpki-client on console-fra.rpki-client.org