Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
File:                     ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json)
Hash identifier:          prgS6/xBfyf7dHv8yWxgzFcjm2xH1KrFRNsJS8pVY0E=
Subject key identifier:   63:F0:14:DC:42:64:D1:8F:FA:AD:BE:FB:F8:03:BB:8A:D8:33:68:07
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858459E936211F8E4ADD8C00CF540
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     31875
IP address blocks:        216.21.216.0/21 maxlen: 24
                          2604:ebc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:62:11:f8:e4:ad:d8:c0:0c:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=7b032cad-5958-41db-b22b-4927d432b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:ba:f5:1e:ba:ab:65:77:ad:19:5d:79:16:
                    58:15:22:29:6c:50:28:9d:f9:f1:ee:9f:8b:6e:1e:
                    81:12:51:0e:67:7e:a4:eb:ce:e3:6b:c4:84:3e:7a:
                    3a:86:c0:a2:e9:85:28:e3:93:e2:09:e1:5a:3b:b3:
                    80:2f:a7:a2:9b:a9:94:b3:a8:fa:db:7b:33:5c:80:
                    1f:25:ea:8d:6f:46:96:dd:91:86:de:da:83:f7:77:
                    cc:d8:12:94:da:9a:3b:95:44:fb:44:dc:ee:4a:c9:
                    cd:aa:45:9b:ee:e1:ad:ce:ed:88:3d:ba:b2:a6:54:
                    65:63:99:2a:98:1f:48:5b:f7:73:72:0a:66:22:d1:
                    0a:b7:db:02:0b:bb:91:1b:3d:44:92:50:12:75:e3:
                    1b:cf:4c:86:ad:b9:1f:55:16:a2:d9:9d:dc:d6:ce:
                    d3:9d:71:95:98:df:40:ce:c4:fb:52:ef:54:62:a7:
                    40:72:81:2f:74:90:8c:ff:eb:f7:92:75:f2:58:50:
                    d5:b5:6f:12:c0:9e:00:25:f8:31:04:d1:52:b6:c1:
                    42:04:09:1c:05:c8:ee:68:20:bb:89:93:27:af:cf:
                    56:95:b6:cd:03:74:c7:41:0d:4d:ba:a5:4d:90:ef:
                    73:c4:f9:e3:52:0d:8f:a3:80:8b:a3:8e:11:8a:ba:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:14:DC:42:64:D1:8F:FA:AD:BE:FB:F8:03:BB:8A:D8:33:68:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:75:b1:e5:63:49:d1:a1:cd:e4:38:16:50:59:ce:81:c6:86:
         57:f9:53:dc:54:7d:2d:f2:c3:ac:34:33:45:b8:0b:6c:73:b1:
         ea:59:0b:dc:11:fd:96:02:82:7a:7a:9e:15:a5:4f:09:a0:31:
         17:c4:f1:e7:8a:ba:20:49:54:8d:5e:bb:b0:91:2e:3f:be:b0:
         4b:35:84:f8:8d:93:bf:f9:44:aa:e3:51:a3:f5:9b:80:e8:bd:
         48:53:b5:39:e7:39:93:bb:27:81:1b:b0:e3:97:a2:fb:23:eb:
         ef:8c:44:25:10:ab:09:15:ae:b4:b0:43:c3:cb:5e:e7:d5:26:
         ce:cd:47:fb:c8:a0:7c:27:38:69:90:46:ae:47:bd:0c:7e:b3:
         07:d1:8e:af:aa:22:85:46:6f:22:92:09:fe:18:dd:48:9f:8c:
         cc:7a:37:e6:76:2f:1b:1d:26:71:55:56:76:8f:12:98:bc:6a:
         27:97:0c:c1:eb:b4:15:5f:1b:0a:0c:2d:ca:46:fa:f7:01:5f:
         7a:81:9b:5a:53:bf:ec:b0:38:91:43:2b:78:2a:13:ed:cb:c3:
         29:24:41:51:cb:91:21:81:a3:5d:62:13:a8:2d:51:5f:41:1f:
         4f:7d:5e:e1:54:93:1c:1e:69:98:59:71:fb:3e:21:02:5e:d7:
         ac:32:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:03:20 2024 by rpki-client on console-ams.rpki-client.org