Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa
File:                     4bf76b6d-5970-3d19-8ade-5717d3645acf.roa (raw, json)
Hash identifier:          0VlIht8ua540Iqx9F9Z2rSM9UYN3ggqQvA1t6Ll+awU=
Subject key identifier:   B4:D5:C2:B8:58:62:27:68:28:CD:BC:35:84:F0:D5:CB:75:FF:8F:60
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845DA98EF537BA7C272C22FC980
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     11232
IP address blocks:        209.169.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:ef:53:7b:a7:c2:72:c2:2f:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=e522db3b-516e-4333-b060-c149b06fc29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:f3:df:ce:c4:18:ae:1c:af:7b:2a:dc:ef:
                    f0:90:05:83:b1:04:1f:90:64:fc:47:ed:ba:34:20:
                    7e:f2:fa:2c:25:d7:ce:b0:67:4f:71:81:aa:a8:72:
                    a2:44:4b:87:72:fd:c3:24:2a:11:ba:fe:08:df:92:
                    14:2a:ae:d7:c3:90:02:17:46:8c:eb:13:14:d1:a0:
                    c1:96:1c:31:b2:8d:88:c4:b2:a9:6a:87:3c:c0:fc:
                    d6:60:96:86:40:53:d9:82:94:65:e5:7e:fb:d7:ad:
                    26:3c:d6:46:34:75:fe:1d:e7:dd:1a:6a:0b:eb:bf:
                    c5:36:f9:e8:ca:2c:8b:9a:30:52:49:3e:65:bd:d7:
                    98:9b:d8:24:21:54:c3:da:ef:39:22:fe:6d:6e:c2:
                    4d:40:58:91:e2:59:3e:d3:8e:0a:6b:a0:5b:90:91:
                    99:38:db:a2:48:96:ec:5e:33:9e:7a:bb:45:90:8f:
                    48:bb:a1:5a:d2:25:45:8d:54:38:c0:87:9a:c3:47:
                    a1:f6:6b:f5:09:72:84:4b:bb:29:6a:45:a0:06:75:
                    7a:ee:15:86:80:de:2a:d8:a7:3d:df:57:2b:ba:d9:
                    d6:97:91:f6:d8:26:3c:97:1f:67:5c:29:3a:40:67:
                    d4:94:90:0b:0b:27:05:a4:fe:f4:d2:54:4a:24:f1:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:C2:B8:58:62:27:68:28:CD:BC:35:84:F0:D5:CB:75:FF:8F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:01:36:af:8e:82:75:6a:3a:71:2e:97:49:9b:af:d9:d3:91:
         cb:a6:2b:1f:fe:78:6d:5d:1f:72:25:16:1e:d6:bd:3d:a9:15:
         42:47:f1:b0:e7:79:69:80:d7:9d:8b:c0:05:9b:6f:64:e3:8e:
         f8:b1:d3:2c:d0:a3:72:2a:51:85:6b:28:6a:44:3d:52:31:01:
         8e:bb:1a:ac:3a:b9:8d:e8:d6:ac:fd:34:61:b1:3a:73:ab:0c:
         ee:72:71:6d:f6:2d:c8:48:d0:63:3b:94:84:07:29:20:7c:e6:
         b5:c0:a6:a6:8c:3f:3e:6e:a4:21:7f:10:f4:64:60:1f:0e:05:
         68:40:7c:db:7c:b4:c1:ba:bc:cf:db:eb:27:d3:5e:c5:4a:7e:
         71:f3:48:b4:7c:fc:bf:7f:8d:6a:c1:3a:a4:cb:30:33:f6:5c:
         31:48:26:ad:be:f4:63:e5:36:1f:4b:83:43:27:eb:a9:c0:cc:
         b7:36:ae:34:2f:38:b6:b1:a3:74:d1:97:e5:5f:d9:a2:2e:6b:
         12:63:77:eb:6e:6f:89:50:b8:93:17:15:00:2b:3c:fe:57:0d:
         99:69:6e:74:2a:be:40:7f:12:85:18:9d:39:9c:8a:dd:ec:df:
         dd:78:32:20:2c:d0:c5:95:f4:af:2c:7b:d5:8c:fd:92:e4:70:
         76:7d:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:32:28 2024 by rpki-client on console-ams.rpki-client.org