Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa
File:                     2084f899-7d01-37c6-a226-f5e6d53fcee9.roa (raw, json)
Hash identifier:          uXRrqY4bd0K/Sjzshk7ejnbxnMcbfXklNothWuq5TXw=
Subject key identifier:   B2:89:4C:7C:29:1B:3D:C5:89:CD:62:C3:04:32:48:E2:BD:25:D7:E4
Certificate issuer:       /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Certificate serial:       010D0C9F432858452D828D1B90621C0EEC92B500
Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        208.112.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:8d:1b:90:62:1c:0e:ec:92:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=23b538b5-2ecc-45a7-9406-8a85dec3c842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:82:42:da:45:e7:1c:4e:3c:39:31:23:27:
                    be:99:46:e3:f0:90:c0:44:0a:89:1a:14:1b:31:d4:
                    da:3b:34:b7:cc:60:7c:03:c5:6f:be:49:be:56:5d:
                    ce:ae:c1:8b:2f:bb:8b:82:57:8b:37:c3:73:e5:12:
                    a2:c6:fb:09:3e:e3:33:5a:07:e4:33:10:a6:5f:05:
                    9e:4c:1d:e2:43:eb:18:32:d1:f0:ea:4d:60:7b:b4:
                    dc:69:30:a5:24:26:ec:1e:ad:32:7a:45:59:61:11:
                    ac:ee:90:16:a1:45:9b:77:6f:96:50:86:00:f7:ea:
                    71:f8:75:a1:9f:60:3b:fc:d0:11:45:65:16:66:40:
                    ae:a0:b6:63:ae:85:53:fc:cc:5c:43:61:fc:b4:b2:
                    43:0c:94:23:37:d1:4a:73:28:06:c8:da:f7:ed:b7:
                    82:a9:76:af:44:af:ab:38:ec:81:61:ca:3c:36:1c:
                    cf:7a:cd:f8:da:cb:e0:7e:c9:02:cd:19:12:7c:19:
                    f8:68:92:a1:dd:5c:da:cb:75:09:d0:5b:e0:1a:37:
                    04:af:61:9e:7b:da:ca:60:02:72:f8:2f:b9:f9:7b:
                    04:94:90:eb:c7:bf:c4:c5:a2:5d:fa:65:2d:1e:98:
                    94:d1:d0:f6:d0:cf:8e:a5:e4:47:58:51:4e:8f:cb:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:89:4C:7C:29:1B:3D:C5:89:CD:62:C3:04:32:48:E2:BD:25:D7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl

            X509v3 Authority Key Identifier:
                keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.112.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:f3:37:a0:9c:ea:c2:ad:5e:9e:5a:8b:4a:7f:c8:ef:cb:
         0c:ff:fc:20:56:5d:f4:52:c1:29:2f:41:d4:97:11:8f:31:86:
         03:61:3d:98:ec:6c:2f:5e:9f:cd:f4:f1:44:08:ee:c7:76:79:
         21:78:e0:4c:15:75:43:2a:fe:89:2e:3a:bc:d2:c6:35:bf:99:
         cd:e8:b5:03:8b:35:a3:03:81:73:76:aa:37:35:dc:9f:02:2f:
         77:fe:b7:f1:4c:6f:2f:95:f6:20:b4:a5:6a:df:37:c8:3a:29:
         79:9a:5b:5d:6a:ad:79:11:8e:84:3b:31:d9:b7:d6:1d:cf:da:
         83:68:00:c5:aa:2c:37:f5:70:7f:de:92:d2:23:5f:e6:2b:ba:
         77:9d:e5:2c:1f:b7:6a:05:a5:a7:12:b7:83:c2:1f:54:1c:45:
         8a:0f:93:a5:e6:2a:a1:cb:06:40:8f:35:20:1d:4f:18:80:6d:
         df:6a:da:35:91:71:88:3a:65:22:2f:fd:37:4a:fb:25:25:6a:
         a2:f6:e1:47:ff:81:97:90:86:5f:b4:24:f7:cc:c4:87:0a:bf:
         ad:16:4d:6d:6f:b5:d5:af:1f:ce:66:d2:a1:ec:94:7d:8b:16:
         1f:39:4c:b6:57:7e:01:4f:9e:63:57:00:3b:70:87:77:c4:72:
         11:a6:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:15:07 2024 by rpki-client on console-fra.rpki-client.org