Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa
File:                     d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json)
Hash identifier:          HLrLHK/UuboqZ72uld/gsbUlogg/N3SYXwiO41sVo5g=
Subject key identifier:   E8:AB:60:9A:05:B2:99:B3:BE:0D:E3:D9:04:DE:3B:0D:69:36:F5:59
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845D503CB65F73D199F8AA43D80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     22781
IP address blocks:        216.131.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cb:65:f7:3d:19:9f:8a:a4:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=a2b5c811-ee5b-4d2b-94ce-a76d9644be5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:d3:15:46:51:4e:08:78:79:e7:80:0e:64:
                    82:51:c7:95:e5:dc:bf:38:66:35:df:05:c8:bc:6b:
                    57:9f:43:16:7d:69:6d:68:dd:1f:ff:d6:4e:ea:4d:
                    4c:d7:76:9f:64:ac:d7:5e:cb:92:06:14:bc:36:24:
                    62:8c:51:f7:2d:bc:4a:a0:ea:9b:97:ca:ef:7f:c6:
                    24:dd:cf:90:f6:93:92:f4:76:9d:50:02:f3:74:2c:
                    9a:4b:21:9e:da:03:04:45:c8:21:4d:b8:27:2e:8f:
                    13:97:2b:e1:ee:80:1a:84:d7:1a:93:7b:56:0f:be:
                    d8:8d:ae:a0:f9:bf:1b:44:7a:ef:99:08:8e:c6:81:
                    d9:c9:4e:86:f6:b7:a5:7f:bd:6f:ce:80:11:b9:14:
                    9a:08:a1:8c:51:f3:dc:20:85:e4:31:24:e2:dc:14:
                    a9:88:cf:bd:51:27:b1:7a:e3:c7:e5:1d:fd:ec:57:
                    c6:cb:04:b6:fb:8e:af:74:1b:49:19:c7:2d:d7:27:
                    40:ce:75:34:6d:94:91:55:90:b9:cb:b8:00:41:44:
                    5e:a9:1b:a3:7e:6f:76:9c:9d:49:92:f1:91:77:2e:
                    f0:5a:6c:5a:b7:ef:3a:6a:b4:94:71:e7:bd:4d:5b:
                    a0:e4:7b:cd:18:82:68:c0:e0:d4:06:cc:f8:e2:f5:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AB:60:9A:05:B2:99:B3:BE:0D:E3:D9:04:DE:3B:0D:69:36:F5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:88:cb:05:73:60:c8:fb:8b:d2:6a:a3:bb:e6:c5:10:3e:7b:
         8e:e7:8e:b6:4f:a8:3c:43:b9:7b:c7:92:ae:73:ad:ba:80:48:
         22:dc:7c:2f:a8:82:e8:4f:dc:71:be:a1:b1:14:be:aa:70:74:
         43:49:c9:e4:b7:f7:82:ee:e8:90:cb:e6:03:d0:36:42:5e:bb:
         f6:e5:0e:d5:0a:93:d9:bb:4e:54:92:a1:df:83:26:b9:47:5a:
         a4:5e:72:aa:40:57:1d:0a:5c:dc:3e:cf:99:89:f1:a7:d1:4a:
         93:bb:51:d4:87:7d:7a:7a:6b:ea:ee:10:6a:03:41:9b:f3:bb:
         8f:e4:00:40:d2:f7:85:4c:62:a9:eb:ff:e8:c7:ed:29:7d:c2:
         73:81:2a:61:0b:dc:36:60:6a:f0:b6:2a:43:5d:ed:5a:39:e6:
         54:54:24:e8:ea:d1:1f:ce:85:26:d4:12:a2:da:80:50:dc:bd:
         a5:e1:90:b4:18:21:5f:d6:fa:ce:6d:4c:c9:da:64:11:57:f5:
         38:0f:be:6f:46:2c:ea:b7:69:74:26:f5:fb:e1:85:0b:2f:da:
         5d:9d:b1:da:c6:cb:d9:ef:7d:71:11:6f:30:9d:d7:7e:74:10:
         bb:d2:2c:cc:c7:55:56:96:45:4c:57:f4:67:8d:23:c0:41:50:
         8b:1d:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:39:49 2024 by rpki-client on console-ams.rpki-client.org