Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9cb14c5b-f57c-3c34-b4e8-a862c41a6db2.roa
File:                     9cb14c5b-f57c-3c34-b4e8-a862c41a6db2.roa (raw, json)
Hash identifier:          xGyJXFbIlw3Iv92AUmr3dOyn4I0oFPnGPASJSIVf/mg=
Subject key identifier:   D8:A2:73:93:63:E3:D8:81:DF:6F:36:BB:BF:87:2B:67:EC:B2:5B:59
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462C23C7BDBDA97565D9A100
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9cb14c5b-f57c-3c34-b4e8-a862c41a6db2.roa
Signing time:             Wed 20 Mar 2024 21:01:36 +0000
ROA not before:           Wed 20 Mar 2024 21:01:36 +0000
ROA not after:            Tue 18 Jun 2024 21:01:36 +0000
asID:                     36040
IP address blocks:        208.117.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:23:c7:bd:bd:a9:75:65:d9:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 21:01:36 2024 GMT
            Not After : Jun 18 21:01:36 2024 GMT
        Subject: CN=b7f1b795-9a16-46e8-a6c8-02308a02c0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:ee:26:59:ea:88:df:9b:22:5c:95:59:d3:
                    1c:60:22:d7:3f:6d:f2:c0:c6:ce:a7:4f:cc:02:bd:
                    18:1f:64:d2:09:a0:cc:5c:e5:a6:2a:e7:e6:fd:19:
                    6c:89:e1:f5:5f:fe:d2:ce:f6:30:1a:c3:05:e7:bb:
                    ac:6d:14:4f:54:98:2d:6a:43:fb:1b:ba:6f:ad:52:
                    1f:14:88:12:9a:5c:a8:1f:cd:d4:7f:1e:63:3e:5a:
                    33:29:02:7a:1a:ad:b6:9c:7a:4b:78:78:8d:82:c9:
                    61:a6:0d:1c:8a:ce:39:b7:2c:68:d6:e5:22:ad:26:
                    c9:04:a9:1c:59:59:e8:f7:72:8b:8d:ae:2d:5c:b6:
                    3e:1c:6b:26:0a:11:38:67:80:55:a1:40:b3:43:ba:
                    82:32:07:36:55:58:3a:d6:e9:c5:fd:d4:af:76:fc:
                    6b:f1:7d:9f:ee:43:e1:53:b1:f4:19:ed:48:9d:60:
                    33:3f:1b:6e:95:a4:69:d0:29:04:f0:ea:52:73:59:
                    85:0c:fd:d0:ef:84:82:ff:f8:32:9f:3c:2f:60:a3:
                    ad:21:cf:ea:aa:2c:ac:4b:18:7c:74:b8:c4:2c:80:
                    ca:af:98:0c:91:64:30:51:fc:a6:45:65:2e:65:28:
                    08:63:3e:d7:25:d8:b5:ec:f8:08:5b:85:dc:9d:27:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A2:73:93:63:E3:D8:81:DF:6F:36:BB:BF:87:2B:67:EC:B2:5B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9cb14c5b-f57c-3c34-b4e8-a862c41a6db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:97:4e:11:15:7b:dc:c0:aa:63:61:3e:ff:2a:61:2d:9a:4f:
         20:3e:31:ed:27:65:7f:a8:ad:b1:d1:aa:bc:06:89:60:a2:55:
         47:e5:cc:5b:cc:be:4e:06:0f:aa:fe:cd:25:4a:7e:57:4a:bb:
         af:e3:d0:59:6b:ae:59:ac:2f:d4:00:aa:26:e0:1e:c2:99:44:
         4c:c2:fa:22:df:b5:ce:e6:4c:a2:32:40:ad:f6:92:c3:60:78:
         12:cb:b5:b0:c8:82:f0:83:d6:d2:50:73:ac:e2:dd:42:c8:f4:
         ba:ed:4f:eb:3a:c7:84:11:90:5a:5b:c4:8a:fc:fd:51:fd:8c:
         4f:20:15:95:33:c0:ee:b5:0d:de:db:19:6a:d9:6f:df:20:97:
         45:bd:88:02:c1:57:3c:1f:9f:0d:fd:bb:9f:d9:f9:8f:a0:bf:
         82:37:9f:05:ab:1a:98:11:d7:5f:ee:ce:fa:df:82:0c:0e:85:
         c7:6a:9c:63:a0:cb:e1:18:a6:ef:2c:b7:63:32:49:2c:d6:98:
         15:70:55:dd:40:64:06:b7:d5:06:ae:1f:cf:20:a7:bd:0b:ae:
         f1:fa:16:5c:2e:f3:c6:08:a2:84:24:ba:99:2c:c5:90:d2:b6:
         0c:48:46:f9:d5:a5:bb:cf:87:16:3d:a4:65:5a:63:10:b0:d1:
         5b:6a:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:10:15 2024 by rpki-client on console-fra.rpki-client.org