Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
File:                     470b542c-40cf-3926-b91f-b6e750f55345.roa (raw, json)
Hash identifier:          RHaeD86loznp7z4h4mbw23Nuym9h7AIanqy/X0JIevQ=
Subject key identifier:   D6:1E:15:AE:DB:04:AE:84:10:DA:45:DB:C7:DD:C2:55:50:0F:7D:AE
Certificate issuer:       /CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
Certificate serial:       010D0C9F43285845DF4A62D461CB8696019C66D0
Authority key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
Signing time:             Tue 14 May 2024 17:21:13 +0000
ROA not before:           Tue 14 May 2024 17:21:13 +0000
ROA not after:            Mon 12 Aug 2024 17:21:13 +0000
asID:                     19885
IP address blocks:        206.214.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:df:4a:62:d4:61:cb:86:96:01:9c:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Validity
            Not Before: May 14 17:21:13 2024 GMT
            Not After : Aug 12 17:21:13 2024 GMT
        Subject: CN=d0515b8d-fa19-40f4-a977-bcc5df043a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:5f:1d:93:fc:62:e7:2c:83:a6:56:a4:3e:
                    45:1d:66:37:64:34:0b:de:5e:f0:29:b3:2a:de:11:
                    c1:dc:ae:81:5d:67:d3:91:8d:84:46:d8:01:ed:b7:
                    1e:35:66:b6:1a:ed:dc:dd:13:7a:06:c6:88:24:1e:
                    53:b4:1e:d9:bd:0a:93:74:70:12:38:5f:20:9f:94:
                    fc:ac:cf:d5:d7:83:5c:22:d4:88:20:9e:43:66:af:
                    09:eb:72:b4:a8:df:4e:ac:01:d3:c8:9e:34:4d:32:
                    03:6f:df:bf:3c:85:7d:ad:15:31:4e:dd:85:17:23:
                    37:5b:7a:3f:b8:6a:27:50:ce:64:c7:5c:03:1f:6e:
                    b8:b0:80:d6:da:2e:ab:68:b5:46:4e:48:3d:27:1a:
                    f6:91:85:c7:13:55:06:d4:51:18:f9:c5:20:f2:96:
                    65:0f:6a:63:2d:b0:15:46:68:9f:7c:48:99:88:95:
                    8c:13:2b:c0:dd:b2:b6:45:8c:b0:53:33:18:37:44:
                    93:c9:cd:7c:98:5c:91:39:bf:af:df:e6:a9:50:a9:
                    75:bc:9f:a1:93:86:36:c9:0b:6c:ea:7b:00:f5:60:
                    cd:b9:f1:bd:f3:ae:01:21:77:21:33:38:7c:25:5e:
                    c4:46:d6:89:17:4b:85:e3:b3:13:0f:e7:50:27:50:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1E:15:AE:DB:04:AE:84:10:DA:45:DB:C7:DD:C2:55:50:0F:7D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl

            X509v3 Authority Key Identifier:
                keyid:C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:87:f3:3b:e2:13:3b:7f:d2:2f:8d:24:05:c7:80:57:a3:
         56:0e:c5:eb:fe:da:73:56:a2:c1:0a:61:2f:f6:1e:cb:d8:c7:
         0b:54:ac:9b:39:30:d9:ca:5a:27:99:c0:8e:f2:e6:3c:6c:34:
         f7:57:1a:cc:aa:e6:1e:c1:41:67:07:9d:b9:f4:2e:03:91:a0:
         f0:83:0d:a4:5a:f8:35:7a:f2:c5:b7:3c:af:b1:fe:ad:47:bb:
         12:fd:b8:fc:21:31:74:bf:48:48:b8:b7:72:ad:a8:61:ca:5f:
         24:e5:d4:7a:7c:b5:57:56:5c:20:0e:07:24:b8:8e:56:6a:42:
         3e:af:3d:9e:98:bc:8e:31:ec:27:3a:24:42:4e:7f:81:32:fa:
         09:dd:c8:46:b9:21:e9:49:c7:e6:a0:1c:a6:7f:04:00:87:8f:
         a3:ae:5a:e1:15:65:bc:21:27:b5:2b:4b:90:05:b6:ff:cf:c7:
         13:fc:b2:fd:18:72:f1:ad:10:e3:7f:5b:a3:49:78:98:e1:5b:
         71:31:c7:1b:8f:5f:7e:1a:d4:c9:9c:15:d9:61:9a:48:c3:9b:
         d5:2c:31:f0:f6:94:ee:3b:82:6d:4d:3f:f9:e9:7e:ee:1e:42:
         6b:fa:e5:b3:da:c1:1d:5e:72:bb:80:a8:15:4c:eb:02:e3:a9:
         4d:75:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:02 2024 by rpki-client on console-fra.rpki-client.org