Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa
File:                     0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa (raw, json)
Hash identifier:          lhYhFXA3MxThT3Z/GTptbCjIwftCpaXGdcLb9xMRSIE=
Subject key identifier:   8C:B0:38:14:50:08:4D:AA:4B:A0:BC:0E:43:8C:10:A4:E1:F8:13:B1
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F43285845A2AD7E8CA5FB7E7D7491AE60
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa
Signing time:             Tue 23 Apr 2024 00:16:36 +0000
ROA not before:           Tue 23 Apr 2024 00:16:36 +0000
ROA not after:            Mon 22 Jul 2024 00:16:36 +0000
asID:                     4185
IP address blocks:        165.135.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:ad:7e:8c:a5:fb:7e:7d:74:91:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Apr 23 00:16:36 2024 GMT
            Not After : Jul 22 00:16:36 2024 GMT
        Subject: CN=38ad9ecd-8d7a-45a7-9712-aebbf92bcf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:85:49:85:64:bd:66:db:5d:13:06:bb:fe:
                    d2:2b:94:26:7c:2e:00:e9:6b:46:d6:c7:22:46:7b:
                    07:33:0a:89:a6:eb:0f:64:03:a9:05:ba:01:2b:37:
                    83:8e:48:fe:4f:1a:66:31:ac:7d:cf:7a:d6:22:6f:
                    e7:f9:bb:3e:21:c2:e5:79:1c:3b:08:07:b6:17:b9:
                    0f:cb:e7:c6:dd:0b:e5:93:1e:31:39:84:ee:30:e6:
                    64:fa:da:29:4a:8a:ea:6a:a5:7d:ba:c1:99:b6:28:
                    2a:b0:9b:79:66:36:84:8b:0e:15:c2:b9:f8:9e:e6:
                    dd:8e:4e:7a:4b:43:de:db:1f:49:7c:c6:f5:5f:77:
                    0b:92:1d:70:0b:46:96:5e:3e:13:90:ed:88:58:09:
                    16:5c:8f:a7:91:bc:69:a0:d0:21:f6:a0:25:fc:8f:
                    4b:57:af:c2:e8:56:83:9c:dd:12:97:0b:f1:8f:59:
                    c4:99:11:bd:55:ef:9c:0e:12:02:c8:de:44:f9:1f:
                    8e:4d:6d:f6:df:2b:32:2d:6d:f3:5e:07:86:9b:8c:
                    e2:42:fb:9b:ee:a2:61:ba:38:e9:07:07:ab:de:e1:
                    b9:b0:8c:4b:38:56:a8:a2:4f:fe:42:b0:97:f3:83:
                    fd:57:fa:ba:af:9d:04:c3:44:5c:93:a2:27:06:17:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:38:14:50:08:4D:AA:4B:A0:BC:0E:43:8C:10:A4:E1:F8:13:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:21:0b:9b:e1:2a:0e:4f:bf:3b:9f:46:0b:e1:0b:d4:da:fd:
         01:46:c1:13:df:17:c5:2c:42:73:16:44:d1:b1:3c:4a:bf:5c:
         e0:6d:2b:50:94:c9:9d:75:17:73:5d:13:f8:9f:78:d3:a9:05:
         3a:e2:7c:2c:cb:1b:46:fa:4e:a6:af:71:4a:b7:c9:49:fd:bb:
         8d:1a:7d:50:2f:8e:39:fb:f8:fc:9d:6e:d9:90:0a:54:af:c8:
         2c:22:44:ab:33:d8:02:87:13:31:36:f9:12:5a:b8:90:95:43:
         cd:bf:89:18:28:4b:fb:bd:bc:d1:76:25:78:9d:c7:25:ff:4e:
         3a:d7:6e:d8:c1:8b:48:5d:74:00:3e:fb:c9:f8:dc:48:14:da:
         ab:5f:9c:b8:79:28:17:e3:83:ec:ec:f0:f1:16:fe:a8:a6:40:
         a8:fc:7a:00:9a:8c:c1:7a:c9:a7:53:7a:06:86:11:65:86:b7:
         ea:e5:9e:2b:a6:9b:34:50:15:f6:86:04:e8:68:cd:73:8a:34:
         1f:b2:b0:3c:69:47:dd:ba:a9:2f:03:27:e8:e6:74:e7:50:d4:
         b0:e8:1d:11:f2:63:99:0e:6a:d6:f6:ed:fa:ec:ef:67:d6:02:
         2a:6a:75:43:18:63:70:2d:73:b5:97:f6:60:7e:9a:84:5d:19:
         76:e9:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org