Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa
File:                     5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa (raw, json)
Hash identifier:          Oad9yOiMD6gI7pjVVTAbMSu7BeO31ulbffjrmTnhDiY=
Subject key identifier:   CB:72:FB:B1:59:FD:09:E5:19:E8:AE:BE:24:5C:0B:F4:FB:54:EF:33
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453E42A527F638F027F4B997A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        209.171.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a5:27:f6:38:f0:27:f4:b9:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=bc5477c6-bf8b-4bb7-9c0f-27a97b97543d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e6:51:98:6b:00:b1:a1:b8:d0:61:08:5c:ba:
                    70:07:58:1b:11:dc:99:34:f6:96:d7:53:bd:48:d1:
                    91:76:77:50:c3:8a:24:b5:d1:ff:39:c1:b7:98:15:
                    6e:8c:87:5f:64:f5:ac:9b:a4:dd:7a:a2:07:50:cf:
                    f2:28:41:35:ef:d6:12:dc:e5:c9:36:50:c5:b1:75:
                    ec:d3:63:b2:68:9e:51:75:d3:98:1c:da:e9:14:96:
                    3f:8d:9e:37:58:23:81:03:78:eb:ba:04:bc:6d:44:
                    41:a4:2f:4f:34:00:4c:1d:f4:1a:22:6f:9a:5b:21:
                    4d:65:8c:2d:30:f6:49:7c:b6:15:3f:7f:82:5d:a7:
                    56:4d:f3:b7:f8:a0:fc:b5:56:77:ae:c3:0e:fa:52:
                    94:c9:88:39:a3:94:99:ee:0c:75:e4:be:f0:7e:44:
                    ab:3a:8f:32:be:ef:11:f7:fd:12:73:08:30:d4:b4:
                    62:98:8f:ee:ad:ce:3a:b6:2a:c4:00:66:e6:06:4a:
                    27:15:a4:60:b6:e0:03:08:7b:d9:4c:38:6e:0b:a1:
                    1a:45:80:cc:75:42:07:f1:00:17:42:9b:81:9b:9f:
                    05:b5:b1:0b:bf:2d:5d:82:2c:c0:06:37:0d:64:6d:
                    bc:9e:67:ac:e6:b8:74:c1:55:b4:f3:a8:48:e4:12:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:FB:B1:59:FD:09:E5:19:E8:AE:BE:24:5C:0B:F4:FB:54:EF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:de:b4:2c:a8:91:0c:88:75:77:64:90:0a:55:b8:97:9c:
         95:54:12:34:3b:04:ce:6c:99:66:cf:ed:bc:cf:a0:c9:d1:e6:
         35:1f:aa:40:0c:5a:a0:f4:57:f5:29:59:d2:8a:18:16:37:38:
         a8:86:84:0e:7d:f7:9e:3f:b8:ed:d0:2f:a7:d7:60:02:52:a8:
         ad:40:6e:ed:50:a7:a2:56:0b:24:17:4f:4e:47:5b:d6:3d:39:
         63:5f:bb:ba:14:69:99:fa:d8:77:ea:35:b8:58:3a:0a:43:fb:
         69:70:f3:f4:74:c3:b2:95:f7:13:1c:2d:e2:94:6a:09:de:76:
         da:78:5b:90:19:f3:21:f7:48:c5:31:89:c5:ed:9f:8e:33:ef:
         8b:3c:07:9c:a8:b9:78:44:5d:2d:41:a9:d7:1c:84:1f:d7:52:
         f5:70:8b:c6:88:3c:3d:ed:91:a7:db:10:0c:55:78:a4:ca:a1:
         da:72:91:12:be:10:2c:73:6e:77:92:9c:2c:84:0a:e9:20:89:
         2a:ed:d2:5d:52:58:04:3e:c5:20:a1:2e:bd:aa:ce:4d:fe:b7:
         40:c5:76:c7:c4:9c:d7:93:79:08:7f:49:85:f5:74:7d:4e:67:
         8a:c8:12:69:ba:70:92:94:55:85:03:cc:f8:4a:3c:33:1e:12:
         03:f8:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:20 2024 by rpki-client on console-ams.rpki-client.org