Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa
File:                     b5b2dd17-d227-39eb-b530-306174de9aab.roa (raw, json)
Hash identifier:          3Y5wr+2MJtdC93E2DYoefpMoMp9+hLCz7njRbECdk8I=
Subject key identifier:   DB:2B:DF:B4:2B:F0:23:75:7C:6D:0E:98:3A:A2:7B:13:58:6E:08:65
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584574B31C7E7BB90CE7094AFC30
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        142.0.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1c:7e:7b:b9:0c:e7:09:4a:fc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=118d1f1c-af29-41fe-9dd2-6445719e86c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:f2:30:1d:16:eb:bd:06:e1:b7:2a:90:85:
                    a8:81:33:8f:7d:5e:b2:9a:40:b9:76:46:7c:db:64:
                    6b:d8:d9:9b:81:e1:e1:e5:63:b5:d8:fe:5a:73:a2:
                    62:eb:1c:f2:20:71:37:91:99:46:55:fb:92:61:6b:
                    c9:84:95:af:35:01:87:cb:fb:d1:b1:9b:a4:df:07:
                    16:31:b7:cd:d8:6f:c6:4a:66:19:93:68:a1:72:b5:
                    77:ee:8f:ec:43:8a:d6:d9:9f:ce:d9:d0:e2:54:47:
                    3c:8f:b7:cb:59:fa:8e:a7:e0:9f:80:91:f3:21:ed:
                    b3:d2:53:1c:a4:de:43:7b:d9:25:8a:bf:f3:75:8f:
                    44:cc:10:5c:33:12:1f:af:40:81:8e:b2:ae:83:a4:
                    73:4b:54:e5:f8:0e:01:2f:47:3c:a0:e3:e9:7e:cf:
                    43:d3:a6:c6:02:d7:3e:73:63:03:38:13:05:35:43:
                    6a:55:e2:0b:a9:7e:b7:14:d5:e3:d7:88:78:a4:c9:
                    e3:73:1a:6f:da:94:ae:26:6e:ac:b6:d3:f3:85:21:
                    86:8a:38:48:32:56:1a:5f:45:b6:bb:28:8f:e0:43:
                    44:0a:85:a9:e8:42:d3:77:f9:3e:b4:42:73:9c:c1:
                    be:a7:71:42:b3:13:64:e8:cd:97:ab:9e:2e:b0:df:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:DF:B4:2B:F0:23:75:7C:6D:0E:98:3A:A2:7B:13:58:6E:08:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5b2dd17-d227-39eb-b530-306174de9aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:0e:64:4d:a5:4b:f8:de:bf:6f:8f:08:39:51:c1:e0:d0:
         df:fb:cd:6d:df:84:56:f2:2d:33:95:1f:52:17:11:19:df:88:
         4e:ba:d9:3b:e2:23:02:c1:27:ec:a5:76:c1:58:f4:00:c8:0b:
         b9:ee:41:ab:f7:ac:d7:b2:c6:c5:26:41:e2:68:ee:07:4f:f1:
         d9:d8:76:d9:9c:f1:00:8f:67:0b:ad:cc:84:73:47:d5:36:a4:
         44:9d:21:6d:89:26:39:9b:aa:dc:ed:6f:ed:c5:98:4f:7e:0b:
         5a:0b:c2:bd:6e:61:e0:52:79:a9:5a:c6:72:74:e3:5d:4a:fb:
         e6:b8:1d:3c:4a:3b:43:f4:0c:33:ea:89:8c:62:9d:7a:8a:09:
         2f:a7:48:ce:19:d9:b1:a9:19:b2:f9:c5:91:00:52:56:0b:4e:
         1d:0e:af:58:e3:8e:27:b7:07:3d:a0:e5:de:f2:24:14:f8:fd:
         3a:e1:5c:cd:dd:02:40:3c:9f:f1:93:af:b8:48:31:ab:ca:d0:
         ec:4d:5f:a2:ac:4f:31:68:58:36:3c:39:5a:b6:ee:52:35:44:
         a0:cf:1c:fb:e1:9d:db:fd:0d:98:02:6a:88:e1:98:50:a8:8b:
         f2:d2:a5:3e:18:b0:12:53:cf:a9:96:fd:59:29:49:6e:60:9f:
         72:19:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:11 2024 by rpki-client on console-fra.rpki-client.org