Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
File:                     9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa (raw, json)
Hash identifier:          P5FSPWvGS/px4b2HEdxJqlGjbA0mdhFO0Iy6LUUKhsw=
Subject key identifier:   A6:EA:72:E2:39:D7:94:55:F0:F7:1A:50:9C:1D:0D:69:24:CF:13:0D
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F43285845D39E63BCEDD122A9F88C4B80
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     26914
IP address blocks:        166.93.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:63:bc:ed:d1:22:a9:f8:8c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=900998f2-f42f-4b56-81d6-c7b2958cb779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:41:6b:96:73:6c:95:25:27:33:2d:65:f2:
                    51:ac:76:f3:ab:dd:5a:20:37:e0:18:1d:86:73:37:
                    d7:79:3a:a7:21:92:1b:69:b7:20:b6:17:72:c4:c4:
                    d2:b7:ce:b5:98:ca:de:07:21:08:82:6f:4e:28:f4:
                    e3:08:76:09:6b:ac:a2:25:5e:c4:c9:29:fe:a6:7b:
                    4d:fd:bf:7a:34:4d:6b:20:2e:65:48:b3:b1:38:5e:
                    da:66:57:38:5c:d4:33:d3:1b:4b:05:82:1f:a8:b2:
                    72:b5:a1:29:61:bb:42:fb:6c:14:7f:35:2f:da:42:
                    5b:4b:8f:21:8d:f6:6e:e0:0e:b1:29:89:59:df:29:
                    f8:aa:da:75:14:98:86:db:8f:15:24:52:10:ca:03:
                    03:58:d0:ff:43:9d:03:e7:24:b0:37:8e:16:9e:48:
                    6d:73:4c:aa:b2:a9:ed:fc:69:14:68:ba:09:2b:66:
                    bb:1e:68:f3:18:58:9b:fd:d2:16:d6:ec:db:5e:f1:
                    92:9e:8c:e2:67:1e:32:cf:56:49:34:c7:48:6e:14:
                    bc:1f:b6:56:a3:a2:9c:d5:a5:d7:73:e3:49:f1:db:
                    ff:0e:96:7f:21:3b:f3:95:dc:5f:4a:e5:3e:df:0c:
                    9c:de:99:ca:2e:67:7f:d8:7e:49:86:b6:32:8e:96:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:72:E2:39:D7:94:55:F0:F7:1A:50:9C:1D:0D:69:24:CF:13:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:48:9e:3b:81:48:c1:aa:61:b7:41:cf:fb:97:0c:74:72:d8:
         10:3d:ad:ed:73:5c:03:d3:fe:bf:5c:06:54:db:f6:26:16:b3:
         1d:85:fb:ec:f9:57:9e:c6:db:25:9c:a5:f6:fe:5c:df:01:b8:
         6d:78:f5:97:dc:c2:83:e4:51:5e:87:83:0b:a6:4a:c1:b7:13:
         2e:6f:42:04:95:c0:89:fc:42:55:f4:33:9c:1e:13:5b:97:94:
         31:44:2c:5b:fc:b4:a6:04:ee:33:51:bf:df:eb:82:d3:81:94:
         6b:24:d3:77:bc:fc:e0:12:14:20:f9:32:2a:18:09:27:01:0a:
         81:0b:04:01:ac:25:74:65:98:fb:f3:a4:95:2c:26:27:1e:b4:
         07:6e:47:25:19:67:88:98:f1:40:f0:f2:90:cb:e4:f8:75:a3:
         7f:f7:82:4a:05:e5:05:d3:a6:11:33:00:f3:ef:6c:fb:ea:55:
         b0:25:91:4c:9f:8f:60:2a:e9:e5:53:3f:f1:f6:1c:6d:66:f5:
         0c:b9:ec:b3:62:7e:54:ee:ac:c4:75:ce:33:7d:11:7a:a9:00:
         72:af:15:c0:dd:ca:73:1c:6f:8b:7a:d4:d1:58:f2:63:a0:54:
         c0:b6:08:18:73:ee:7f:f2:bb:28:23:31:7c:b1:29:04:fa:0b:
         18:cf:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:42 2024 by rpki-client on console-fra.rpki-client.org