Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
File:                     70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json)
Hash identifier:          F0H8m8wQyX0YKVLR6mtlr2o4ELrinnv1xTRiLDspdd8=
Subject key identifier:   CD:E4:6F:93:7E:F3:51:AF:06:E9:B5:B4:44:E4:8B:89:49:C3:8E:2D
Certificate issuer:       /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial:       010D0C9F4328584571E86E3D47F315057154F080
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     397701
IP address blocks:        192.64.12.0/24 maxlen: 24
                          199.193.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:6e:3d:47:f3:15:05:71:54:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=c5dc98cf-e310-4387-b782-69d6cef95dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:ea:8a:e5:c6:e2:4c:ff:7c:b6:69:ea:2a:
                    fe:bd:c6:f6:4b:b7:e4:a0:ca:bb:7f:c7:3c:50:65:
                    64:b5:ce:2b:28:e0:84:23:8e:60:54:b5:6c:b7:9c:
                    b7:ee:66:95:bb:67:bf:dd:ce:47:09:d5:d3:1d:d1:
                    cb:48:75:67:4f:dd:7e:e0:7a:a7:88:65:c6:c3:45:
                    e0:b5:37:af:96:6f:cf:d0:37:4a:c7:bd:4b:3c:03:
                    d6:02:07:a4:07:4b:45:fc:6b:8d:12:37:42:9b:e6:
                    90:6a:94:90:f3:39:3c:46:28:a1:5d:ac:f5:de:88:
                    de:1f:7d:89:e2:81:64:8c:2a:73:8e:c6:6f:fe:dd:
                    b4:78:04:a8:19:7e:2a:92:78:3d:1a:f1:25:8d:13:
                    66:d8:7b:d1:47:f0:f3:04:5c:60:ef:1b:de:3b:23:
                    61:6e:06:b3:87:5d:70:c0:aa:bd:66:53:8c:1d:19:
                    91:72:17:6b:31:0f:dc:bb:48:6a:9d:74:0e:57:24:
                    6d:2f:16:a8:ae:e0:51:0b:e1:65:4c:16:46:f2:a7:
                    e1:d4:ff:af:3e:02:40:e6:3a:82:cd:40:9f:ae:6e:
                    97:0b:12:e0:da:38:77:e7:03:2f:92:62:19:20:b5:
                    0c:0c:e0:20:93:07:bc:c8:77:4e:76:46:e2:90:e1:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:6F:93:7E:F3:51:AF:06:E9:B5:B4:44:E4:8B:89:49:C3:8E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl

            X509v3 Authority Key Identifier:
                keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.12.0/24
                  199.193.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:55:8d:64:bb:ff:5a:75:5d:5d:59:1b:ff:6e:46:9d:73:
         e8:02:8c:7c:a9:d1:16:62:bd:1c:94:b9:87:5e:b0:18:fd:2d:
         28:59:16:79:07:5c:a2:44:52:f7:98:ba:31:6d:4d:0d:63:13:
         95:88:de:aa:6d:a3:01:0c:3f:09:5e:3e:53:de:cb:35:dd:ae:
         33:ce:7f:71:54:62:d3:21:0c:74:1d:59:6e:63:e0:14:e8:f0:
         4b:10:98:bb:54:a3:23:83:42:84:18:ad:33:58:1c:32:e1:a9:
         64:07:90:04:a9:9b:29:9c:64:d8:b6:8f:c4:b8:c2:cf:d0:5e:
         e5:22:a2:5d:b7:4d:e0:14:d9:58:2f:14:b5:f9:1d:b4:e0:81:
         e5:10:d4:cf:d6:29:5e:89:89:d7:0b:3c:98:1d:66:d4:2b:be:
         70:38:0d:8e:81:f8:6e:67:bd:bd:c5:d1:c9:7f:e0:6d:22:e8:
         a4:76:25:52:96:5f:04:0c:da:7b:8a:9d:1c:cc:b2:73:4b:d2:
         13:5f:c1:50:bb:41:57:6b:c5:ed:5b:da:78:31:08:7d:2a:61:
         09:87:5f:35:70:ed:49:bc:ba:3c:5d:07:10:99:d5:a9:87:c2:
         79:66:41:1b:ae:df:5e:f5:12:a2:78:1b:f5:f5:f5:f1:99:75:
         fa:d0:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:12:41 2024 by rpki-client on console-ams.rpki-client.org