Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa
File:                     38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json)
Hash identifier:          tTtMez/zHcrpUE8/8HlPBQnRTD6ovnBNBpdMNbRYy3s=
Subject key identifier:   82:F4:72:83:D2:77:D5:98:3A:8B:76:95:12:28:5F:41:80:88:06:A0
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584566BDABEEC040B3115D05FBA0
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     7224
IP address blocks:        192.111.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ab:ee:c0:40:b3:11:5d:05:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=d64dcbee-c109-47df-9bec-cd958d6eb01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:94:59:3d:86:8f:cd:eb:94:da:09:5d:9c:
                    98:bc:5a:fa:10:55:7a:a9:39:1f:1e:cd:59:3d:e7:
                    f5:1e:5c:4c:07:ed:66:7b:a2:51:c5:30:a8:27:9d:
                    0e:6c:f1:87:2d:28:53:be:3d:e8:0b:e6:78:b1:94:
                    0b:8f:3a:b0:f4:ec:ec:2b:ae:70:b8:cd:9d:c4:5e:
                    9d:9e:92:38:db:f4:07:fe:84:4a:b1:a6:aa:14:13:
                    13:c3:2d:bc:33:c3:9b:1e:a3:d8:92:de:64:6e:5d:
                    c5:1d:63:f1:1a:42:6e:d9:31:11:27:ca:57:81:f7:
                    8d:6f:80:4e:84:6c:dd:93:af:90:8f:00:8b:ea:1c:
                    12:b6:85:33:ca:e8:53:df:55:4c:e9:8d:e6:28:6d:
                    ea:48:8e:3c:d3:4a:8e:c6:79:59:ab:81:22:6f:25:
                    d1:2f:8a:ad:69:f8:40:44:52:59:6d:de:ec:e3:2e:
                    a1:cc:24:b7:9c:ce:a8:4d:ea:a4:1b:1e:1a:69:0e:
                    4d:55:1f:f7:6b:ea:e5:c4:bb:ff:58:ba:7c:7e:6d:
                    db:b2:0c:56:0c:26:81:65:51:f0:00:28:3f:05:69:
                    c9:c2:08:6f:fd:87:1e:9a:21:ab:d3:53:61:85:e3:
                    17:7a:e0:84:1a:35:77:cb:0d:30:65:6c:5a:c3:ec:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F4:72:83:D2:77:D5:98:3A:8B:76:95:12:28:5F:41:80:88:06:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:96:1f:ca:98:25:a4:18:55:b2:ed:f6:ba:c4:e7:42:32:
         7d:97:39:29:42:50:41:4a:fe:7b:56:ca:63:a5:a1:bf:05:e8:
         58:79:69:8a:28:a0:c4:cb:f1:92:40:71:2b:87:49:14:7b:bf:
         a5:b6:3a:92:87:f1:a5:29:60:1b:0a:d6:39:f4:61:a3:62:55:
         8d:7c:ee:70:36:03:38:26:9c:b9:f4:b2:d0:ae:48:84:5b:db:
         e6:73:8e:88:a1:3a:be:93:ae:a5:43:69:21:66:2f:80:b2:30:
         c7:43:70:0a:3a:f9:86:e4:b3:29:4c:29:63:86:8a:0b:76:d3:
         e2:d5:e7:ac:4e:33:f3:67:fb:ed:0b:3b:20:0a:c3:b3:dc:f2:
         67:c2:ba:2f:98:2e:00:4a:3b:05:b9:73:53:4c:46:75:0c:14:
         82:e6:be:bb:a7:2b:c3:d8:14:c4:06:8d:63:00:56:dc:7c:bf:
         9d:02:ec:92:41:2f:95:7b:e1:98:95:98:c5:f7:cd:01:6d:3d:
         78:67:ea:08:02:db:95:3d:6d:c4:95:54:f0:9b:9a:da:0d:eb:
         f9:d5:40:aa:37:cc:99:52:cd:52:ec:70:8a:f0:e7:96:7b:c5:
         db:42:58:eb:c5:be:dd:65:b4:9b:09:74:f5:43:73:af:8b:e9:
         07:56:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:45:43 2024 by rpki-client on console-ams.rpki-client.org