Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa
File:                     76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa (raw, json)
Hash identifier:          X6UPI++3tHIs4H5xDYs/UhG29IyEKMtytbxc5G5cvqE=
Subject key identifier:   58:00:6E:EE:6F:AB:AE:EB:F5:D0:8E:0B:20:15:A8:CB:DF:69:AA:E0
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285845052577CB8C1A085688656E40
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        199.255.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:77:cb:8c:1a:08:56:88:65:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=191be7b7-55ca-4ebb-8589-9d3afc03ff9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:00:75:42:06:d2:db:68:b3:14:cb:9f:c5:
                    d7:fc:61:b9:5b:81:b3:07:44:a4:2c:02:02:18:df:
                    79:cf:8e:dc:c9:ba:af:2c:05:b6:d6:e7:f5:00:b7:
                    7c:66:2f:45:b3:2b:71:b6:8a:9a:eb:6f:07:c2:d4:
                    66:44:25:25:d0:1b:94:3b:ef:85:cf:0e:57:80:f6:
                    76:8d:d6:3d:65:bb:7f:dc:6a:2d:c1:4d:01:dd:bc:
                    08:d1:86:7e:fa:7b:3c:88:8b:d1:78:d7:ae:d8:83:
                    21:8a:82:67:ad:a1:9f:16:c5:dd:f2:2a:07:01:fc:
                    d1:27:7a:16:54:b5:23:8d:9f:c2:c4:a5:9c:30:c4:
                    bf:68:3d:f3:5c:df:57:38:e0:4b:d8:4d:36:61:4e:
                    10:6b:a3:5f:83:4a:bb:1a:a9:d3:bc:81:c9:3d:d4:
                    8c:6b:7a:18:8e:15:bb:d3:f0:e0:37:bb:21:55:a4:
                    da:cb:16:1c:b8:2b:80:30:d6:41:ad:ef:7f:ee:78:
                    ba:01:c8:a6:65:e2:d1:17:07:0b:6a:ef:67:34:0f:
                    75:3a:b1:b3:36:e3:be:f3:b5:1d:2c:1b:a9:0f:82:
                    d4:87:42:f0:7a:4a:f8:f0:c1:a8:db:6a:ff:ee:a6:
                    51:52:7b:4c:ae:f2:c9:83:84:fa:d7:8e:64:35:bc:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:6E:EE:6F:AB:AE:EB:F5:D0:8E:0B:20:15:A8:CB:DF:69:AA:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:5c:14:64:84:bf:67:c8:b9:53:50:0a:93:ed:70:3d:58:
         7b:5e:3d:37:f2:1e:13:cf:a0:f7:ac:2b:e7:fb:4c:dd:cc:f2:
         8a:05:93:98:c8:5c:c4:83:cb:3f:32:2e:ff:8e:70:c8:1e:29:
         19:27:54:05:76:ab:24:a5:ac:38:82:84:b2:8a:bf:0d:09:e0:
         b5:65:62:f3:8c:a3:1f:0f:f1:39:bb:b5:c9:e1:14:87:3e:c2:
         50:eb:ae:8d:d0:c1:70:38:92:b5:29:67:7c:f0:0b:2f:99:ee:
         92:d7:a0:72:14:34:dd:f8:1f:98:10:c6:ad:5f:2c:81:e9:44:
         f4:29:80:d6:23:be:da:00:e5:8d:5a:ad:0f:8f:fb:48:1e:14:
         e5:f6:9c:7a:a2:4f:83:a9:dd:44:5b:87:c6:ac:f1:96:97:59:
         ea:c6:77:18:5c:ad:f5:f7:cf:c8:80:26:25:4e:78:80:f0:77:
         60:c7:7d:01:a2:c5:91:6f:6a:81:03:7c:b7:04:d4:bc:df:d5:
         db:a2:ed:a4:5a:04:42:3e:a9:81:c8:aa:02:6c:cf:e9:5f:f5:
         cb:eb:a3:95:4d:42:87:fd:fb:65:d2:af:36:99:69:1f:0d:bc:
         72:ab:4b:ae:f2:e0:06:18:e0:f9:07:75:66:04:d9:21:de:f1:
         54:d7:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org