Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa
File:                     5be5ad73-a914-3384-9e14-732ca96fcc5d.roa (raw, json)
Hash identifier:          BO4FQhtMQPu3PlfsK+Fq8oJbeIeH8dCNBQKYVDdj5b0=
Subject key identifier:   70:83:79:05:75:65:17:DE:7F:71:FB:C2:43:E3:A5:80:B8:E3:7E:E1
Certificate issuer:       /CN=0655a237-1542-4d7b-9294-28c73bb1f8da
Certificate serial:       010D0C9F432858451FAAE79E4EB78635241A1A80
Authority key identifier: B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     396982
IP address blocks:        208.67.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:e7:9e:4e:b7:86:35:24:1a:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0655a237-1542-4d7b-9294-28c73bb1f8da
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=2eaab4a3-60df-4fb2-99e8-0becb14df389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:69:cd:30:a4:48:de:53:dc:af:e0:23:ff:
                    09:a0:a8:ab:02:f6:d5:b3:73:5e:c5:68:bc:47:4f:
                    3f:fe:0d:f0:14:a8:9d:98:52:93:de:84:c6:7f:e6:
                    ab:2b:7e:e0:b2:f1:6a:1a:89:1c:76:61:24:06:d0:
                    aa:c5:b5:ca:f7:f1:21:9b:bf:c8:5f:9b:80:2b:23:
                    5f:fc:7d:bb:1c:0a:f2:96:3c:01:60:3e:e9:32:f6:
                    26:93:fd:14:d8:83:9b:38:bb:09:55:ff:d5:7b:1a:
                    24:a9:36:11:1c:f4:59:4c:2a:50:8f:e6:bf:59:08:
                    06:1d:f2:28:c4:b6:94:6a:ef:ac:2d:f0:5b:c8:64:
                    04:1a:02:8c:84:4d:65:35:c0:e2:69:fc:45:d9:d4:
                    a6:28:b1:00:ba:28:cb:5c:69:7d:20:3b:1e:5a:ad:
                    87:3d:1e:14:79:b2:21:fe:e6:ea:1e:f5:69:5a:f3:
                    e4:2d:59:8b:7e:c4:f4:88:27:51:f7:d8:88:d0:f4:
                    0c:b3:3a:a4:6f:2d:ec:af:88:40:64:b7:e8:33:4b:
                    ce:3f:ce:2f:06:fe:df:58:94:d3:05:ca:19:33:58:
                    92:5b:2f:d1:dd:2e:5a:de:47:00:b0:de:26:fa:ef:
                    0d:0b:66:7c:6a:df:63:5e:e7:c7:e9:89:b0:21:0f:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:83:79:05:75:65:17:DE:7F:71:FB:C2:43:E3:A5:80:B8:E3:7E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/5be5ad73-a914-3384-9e14-732ca96fcc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da/0655a237-1542-4d7b-9294-28c73bb1f8da.crl

            X509v3 Authority Key Identifier:
                keyid:B1:85:3E:F6:2F:39:04:E8:FB:1E:B7:65:52:88:16:30:08:FB:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0655a237-1542-4d7b-9294-28c73bb1f8da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:18:7d:47:ea:b4:de:b7:e3:a4:46:b3:c8:d4:0d:a8:96:f9:
         f3:c3:e2:77:5d:96:0f:41:fb:6b:a5:45:23:5f:c5:45:10:25:
         52:f8:80:8d:54:8a:02:30:99:59:54:03:e3:62:53:02:02:dc:
         e0:05:0e:e1:4a:0d:77:8e:70:3e:70:8e:47:48:bb:fd:ba:72:
         56:b2:ef:fa:7c:0c:85:f3:ac:9e:e1:33:67:d1:ab:33:2e:b5:
         57:3b:fb:de:fa:4f:20:92:8a:07:10:41:a0:fd:76:f6:46:02:
         5d:b0:9a:ed:c2:2e:1e:f9:92:55:63:59:72:d6:58:31:2a:79:
         6b:a2:66:8f:b5:75:0d:56:97:6f:71:d5:90:9f:64:52:77:c3:
         1a:52:69:38:37:9f:24:e2:90:f9:e4:41:71:36:97:51:46:99:
         0c:e2:ad:99:7f:8f:75:6f:38:74:36:b9:35:ae:6e:40:f5:43:
         3b:30:28:c7:13:53:24:47:60:68:23:6a:d6:dd:2e:55:a0:99:
         7d:41:1f:70:35:89:f1:a4:84:17:42:27:7f:bb:bc:8b:81:f2:
         5d:62:fc:89:34:77:2d:d1:03:84:f4:b4:db:de:53:b0:c0:4b:
         1c:da:a4:0b:06:34:fe:d9:a8:8f:85:c1:14:49:7d:f3:1b:25:
         db:c5:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:05:45 2024 by rpki-client on console-fra.rpki-client.org