Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File:                     0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier:          iPuAZGJEAOr5zdXlQHOoV9wJmTnjSr5NjJ9XMX+M+iI=
Subject key identifier:   1F:D2:FE:3D:E3:46:F7:43:0F:14:96:78:3D:DD:2E:AC:9E:14:60:10
Certificate issuer:       /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial:       010D0C9F43285845F253F4E9DE9B23C7A53E5500
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     25661
IP address blocks:        199.119.140.0/22 maxlen: 24
                          207.167.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:f4:e9:de:9b:23:c7:a5:3e:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=68a8fa44-e245-460d-a654-41be56c22812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:7b:a4:68:fc:9e:6d:59:32:1d:21:6e:2e:
                    f3:c1:61:b6:40:e0:75:05:a6:92:d4:9d:e0:df:b9:
                    da:77:e7:7f:7a:45:34:10:3d:33:af:51:12:d0:c0:
                    5d:22:a7:d6:08:38:96:e0:56:26:f4:1c:79:69:59:
                    bf:e6:92:b4:1a:45:3d:29:8a:93:ea:aa:26:79:f6:
                    b2:be:5f:26:d6:1a:68:fb:b2:91:be:df:13:b7:5a:
                    07:72:33:cf:b2:17:c0:f3:06:74:07:27:fd:d5:2d:
                    0a:54:e1:9e:cc:fe:75:1b:d5:18:7f:57:7a:72:8d:
                    b4:d6:3c:69:b0:c5:da:c4:ff:c8:db:68:2f:df:94:
                    a9:e1:9a:b4:6d:89:01:41:4f:2e:0c:b2:9c:b4:5d:
                    3b:c1:c4:db:85:0b:b5:b6:81:52:f6:24:f6:51:e4:
                    40:d9:37:ad:4c:23:df:02:2a:30:5b:c8:60:b7:bc:
                    a4:8c:b6:2f:01:89:a3:0a:a8:54:06:8f:e8:7a:a1:
                    f1:40:b8:48:af:b9:5c:98:d8:75:53:3e:07:c4:27:
                    ab:6d:43:34:ed:ad:2c:be:8a:85:7d:cd:3f:66:e8:
                    22:7a:c3:24:22:73:d0:c3:99:6e:f0:dc:6d:b8:40:
                    f5:3e:4e:6c:76:cb:b4:cb:dd:c2:36:95:e6:1c:a2:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:FE:3D:E3:46:F7:43:0F:14:96:78:3D:DD:2E:AC:9E:14:60:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.140.0/22
                  207.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:58:da:11:67:95:c7:05:d3:8c:83:3a:a3:26:43:e4:07:
         04:ce:f7:af:26:ff:70:a7:64:16:e9:b7:7a:e0:70:c5:51:32:
         28:09:b6:78:09:6b:91:9c:c3:52:3a:44:eb:f8:c4:b0:e2:ac:
         9d:59:8d:da:09:23:ac:71:db:6e:bf:f1:b1:98:eb:b2:95:f2:
         f4:5f:15:b8:75:6d:e9:e2:12:b4:33:ac:a2:02:fd:6c:46:9e:
         0c:06:34:f9:0f:ce:47:00:c4:8d:09:6e:8a:1d:bd:6b:e2:dd:
         d8:fa:5d:98:1e:8f:c8:1a:4e:86:f9:ed:b0:11:a5:97:43:80:
         89:4b:d9:ca:f1:c6:04:ce:70:8b:7a:43:39:6a:42:04:13:72:
         59:5d:f9:59:d2:d5:80:b9:91:1f:27:7d:dc:19:ec:61:22:5a:
         ff:d5:9a:d9:b8:c5:b1:06:e7:33:f5:0b:aa:5e:49:ea:8d:43:
         91:66:54:64:cd:ae:6d:c0:65:66:8f:10:27:74:be:bc:b0:53:
         47:e2:d1:2f:e7:f0:61:73:82:b7:f0:2b:06:26:82:af:c4:e4:
         f2:2d:a7:7d:dc:9b:a3:a6:7e:bb:11:50:bc:32:fb:2d:a5:7b:
         0e:e2:16:13:f0:54:04:9f:50:83:41:b0:a2:1d:b7:36:28:ff:
         d5:d3:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:32:41 2024 by rpki-client on console-ams.rpki-client.org