Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa
File:                     a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa (raw, json)
Hash identifier:          L1NaPCDSQGFIYfstn0rC4WexlwgXakpVETpqb+U1hCk=
Subject key identifier:   5D:53:C7:F0:6E:79:37:9A:D4:67:C0:70:1D:D7:4F:28:66:CA:C3:EB
Certificate issuer:       /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial:       010D0C9F43285845D933B14029AD1DEA265A5D20
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     46253
IP address blocks:        208.94.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b1:40:29:ad:1d:ea:26:5a:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=55a477f4-8dd8-44b3-bbee-22e413325af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:1a:39:23:56:fc:1a:4b:31:d2:20:7e:54:
                    d9:0c:5e:03:c6:d3:7e:42:ee:df:96:83:a1:00:00:
                    b3:25:d4:98:4d:49:80:89:4d:2d:8c:e7:b7:9f:c8:
                    0e:1c:fb:0a:46:b2:80:84:e5:46:24:5f:3d:1a:62:
                    e1:eb:ea:0c:3b:38:67:f1:25:70:38:69:fd:ca:b6:
                    d5:1e:52:8a:44:5c:73:b0:88:d0:7a:cd:03:b5:2e:
                    ad:88:59:bf:35:21:51:05:59:ab:f0:f6:ee:8c:f2:
                    d1:f3:fc:2f:fe:0f:d2:e6:e1:11:4a:f3:52:be:2f:
                    fb:66:9a:07:dd:0e:36:3f:bd:3b:e5:4e:7b:e4:ad:
                    d2:ee:68:89:df:2d:92:f8:22:6f:5b:e4:69:1f:e1:
                    38:bb:4f:bf:1d:b6:39:12:b4:29:55:5e:10:d8:49:
                    7c:80:d0:15:fa:09:c8:6a:b7:4e:e2:94:ff:54:35:
                    58:fe:4b:d8:64:b7:22:63:26:2e:09:e7:f3:fa:32:
                    36:fe:51:64:ab:c3:10:d2:db:cf:4b:b0:d3:0c:03:
                    99:81:57:df:f0:46:fb:c1:77:9f:41:83:94:0c:2c:
                    f3:7b:bb:d3:e3:11:28:f7:8d:1e:cb:d9:3b:35:f8:
                    13:ef:24:f4:4b:70:9f:53:b8:34:69:6a:fe:82:15:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:53:C7:F0:6E:79:37:9A:D4:67:C0:70:1D:D7:4F:28:66:CA:C3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:64:8f:27:2b:f7:14:59:7f:3d:7e:ae:63:57:cc:ab:d8:
         c6:98:f7:e9:22:37:07:84:e8:f7:cc:f9:61:66:28:bf:67:b0:
         21:7c:a5:38:0c:ab:44:f5:9e:00:61:fc:79:ba:34:22:74:80:
         a6:ce:de:8b:05:0b:4f:47:2f:e4:7c:0b:a1:05:37:12:85:96:
         74:b0:40:1b:23:e5:fc:16:96:07:c8:b9:f1:32:7d:a4:ba:ed:
         ef:56:0e:4a:35:c9:3a:cf:3c:0f:f6:6c:85:22:ac:c3:f9:83:
         31:16:05:4d:56:be:7a:65:a2:2e:57:73:41:5d:44:72:55:cb:
         f8:a0:a1:e7:6e:3c:19:7b:9b:89:49:f0:b9:50:00:aa:10:31:
         5f:15:80:f1:af:63:3c:82:ed:f7:6f:4e:66:fe:50:28:35:f3:
         2e:60:47:6d:df:1a:de:f9:81:82:fb:f7:c3:53:23:c8:ab:fb:
         3c:e8:48:06:e3:0f:42:1e:cb:10:07:93:8d:34:bb:40:a0:84:
         2f:52:3c:bf:9c:99:16:ff:93:d2:34:1b:82:28:0f:38:6a:40:
         4b:f2:af:fd:6f:d7:08:30:28:49:0c:7d:4a:94:40:28:73:92:
         95:40:bd:39:d2:58:bb:80:f1:1e:94:5f:fd:e2:0c:77:be:2b:
         39:b8:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:09:41 2024 by rpki-client on console-ams.rpki-client.org