Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa
File:                     4790bf08-5305-3100-a969-0072d8a5e9c1.roa (raw, json)
Hash identifier:          SI1s+2YjgTRrpSZ8utf2yfiq5ugL+28yTCqypMTIFSk=
Subject key identifier:   BC:20:54:B6:FB:DC:01:BE:DC:61:8C:0D:68:CB:FF:E4:AD:00:8E:44
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584511B59018F357E7C2F7D89C00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        216.158.193.0/24 maxlen: 24
                          216.158.219.0/24 maxlen: 24
                          216.158.215.0/24 maxlen: 24
                          216.158.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:90:18:f3:57:e7:c2:f7:d8:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=5ad47ec1-822b-4bec-a47b-b82dac4f9606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:c2:9e:39:28:64:5a:67:3c:72:d4:4f:ab:
                    4e:1a:e8:51:d9:5b:3a:6c:ac:29:72:22:52:f4:0e:
                    5e:d3:3b:cf:1c:20:bf:99:56:1f:12:5a:df:54:f7:
                    8b:3a:95:fc:6c:90:20:8c:e8:a9:9a:c9:83:6b:6d:
                    ff:66:c2:24:4b:d1:6c:08:f1:81:f1:3f:c5:94:0d:
                    cf:76:3c:95:2b:ff:28:7e:d3:e0:b1:ff:af:f6:5c:
                    30:78:1f:62:74:d6:3d:14:18:9c:dd:b1:d6:b2:86:
                    1c:e1:f4:cb:17:58:3c:15:2b:a6:9f:0e:20:ef:91:
                    35:f6:bc:26:3e:04:eb:df:de:17:fc:27:a5:56:89:
                    e7:d9:c7:7a:5e:37:b3:e7:d7:4e:dc:de:28:c3:50:
                    3a:59:c7:b4:da:9a:6d:cd:5a:7e:e4:26:46:48:09:
                    56:a2:5b:d4:98:55:4b:5b:b4:e2:bc:39:cb:91:f4:
                    20:14:e0:d3:1c:cb:c7:ea:9b:b5:3c:c2:e9:04:78:
                    f7:20:fd:94:14:95:0a:7c:76:f5:1d:84:93:08:a7:
                    7f:2c:40:0a:3b:92:33:59:68:3b:12:53:61:b8:ce:
                    85:30:d5:ef:45:cb:e1:9c:aa:69:38:9b:9d:e3:d1:
                    c2:4c:69:f1:10:9b:28:ff:87:78:ce:13:54:b7:89:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:54:B6:FB:DC:01:BE:DC:61:8C:0D:68:CB:FF:E4:AD:00:8E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.193.0/24
                  216.158.214.0/23
                  216.158.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:6f:cc:01:73:78:19:ff:52:33:27:a2:e9:1a:fe:03:fd:
         92:7f:28:c4:f8:ee:e6:c0:92:92:bf:ff:22:4e:92:54:ad:ba:
         b6:b6:1b:ec:00:4f:ef:07:8b:65:56:8f:ca:4b:93:06:7d:5e:
         6e:33:fe:bf:af:ad:56:0e:8e:b5:f7:61:56:fd:33:7c:91:47:
         25:3c:05:d6:0c:8e:34:6e:2a:92:1d:24:43:bd:42:65:f4:4b:
         f1:9e:1c:7b:ff:77:c5:59:f8:71:34:cb:58:64:5b:0e:64:2a:
         91:72:db:bd:f2:c1:7d:b6:cc:d5:1c:f9:a4:f7:3a:46:95:56:
         ae:dc:8e:1c:c6:c2:be:3f:cb:53:f9:29:31:2e:4a:19:98:f6:
         c7:34:44:a0:0b:6f:fc:d1:e9:4e:e8:8f:c3:8f:70:9e:19:e0:
         4e:3a:bb:3a:34:14:4c:3b:36:68:f7:d6:0f:e3:3b:3a:63:ed:
         e1:6d:d2:5b:ab:d0:33:40:b9:ac:f1:04:9a:f3:39:bc:16:70:
         e8:9e:f0:3c:2c:85:6c:a5:ac:06:0a:56:79:02:a6:64:14:f5:
         8c:37:a3:22:af:04:3e:71:41:fc:d1:b5:83:47:b1:65:48:22:
         c2:6f:93:99:06:8d:ee:08:a3:45:5a:d2:29:a2:53:8a:08:18:
         5d:0b:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:23:40 2024 by rpki-client on console-ams.rpki-client.org