Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
File:                     d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json)
Hash identifier:          mT0HVMZp3+xzR3RD3TRon+v3cMwD/FD4P5mP9i9wfvQ=
Subject key identifier:   8C:5A:34:DA:C7:D4:C3:69:55:15:36:39:A5:0D:4F:D4:F3:60:64:9D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858454623B264370536D7A22B4080
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
Signing time:             Wed 20 Mar 2024 20:44:35 +0000
ROA not before:           Wed 20 Mar 2024 20:44:35 +0000
ROA not after:            Tue 18 Jun 2024 20:44:35 +0000
asID:                     36040
IP address blocks:        208.117.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:b2:64:37:05:36:d7:a2:2b:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:44:35 2024 GMT
            Not After : Jun 18 20:44:35 2024 GMT
        Subject: CN=70ea39d1-c48b-47ab-87e7-6509dd1fbb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:9f:96:02:4b:a9:93:69:ef:3e:ad:56:39:
                    40:0a:4a:84:c7:5f:6f:f1:8d:69:db:7d:89:d9:58:
                    30:fc:67:e3:06:ac:76:a9:58:46:d4:1f:56:10:fb:
                    a4:82:ce:64:4e:52:e1:f1:93:5e:bd:d9:8b:d5:9d:
                    aa:d4:50:f9:60:36:9f:23:67:f1:2b:16:90:23:80:
                    65:7c:ce:b8:ec:1c:84:e3:f6:9b:83:86:cf:3d:41:
                    15:0e:22:03:a7:d6:88:6a:66:10:bd:15:6d:aa:f5:
                    5b:16:76:07:9e:98:94:7c:4c:76:7b:33:71:23:29:
                    44:5e:73:da:d0:b0:10:6d:d8:d6:fd:ec:a9:9e:03:
                    54:d5:41:ab:f6:7a:a3:99:72:e7:f1:22:87:7d:c9:
                    40:0c:2a:0d:39:72:94:89:74:f4:0e:f6:91:d2:84:
                    10:61:10:ad:20:65:d4:e8:02:15:60:27:dc:45:a6:
                    11:66:42:f7:f2:e4:50:f3:88:70:26:24:b6:53:69:
                    cf:a7:95:62:bd:38:d9:72:4a:a7:fb:74:df:b3:2d:
                    4a:e3:55:1f:c9:85:0e:e3:7a:ca:98:28:9e:6d:f5:
                    ac:e2:f1:0f:bb:ce:fc:05:9e:20:6d:dc:43:97:e0:
                    21:ab:e4:b2:16:bd:fa:de:4f:97:e9:e5:77:b9:90:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5A:34:DA:C7:D4:C3:69:55:15:36:39:A5:0D:4F:D4:F3:60:64:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:db:a9:76:1b:29:9d:7d:db:fe:7c:77:ef:2e:8a:b4:1c:ce:
         af:21:75:c5:ca:f8:18:08:65:e3:da:32:d3:c3:5e:f0:10:6b:
         c9:62:a4:5c:0a:35:52:28:b1:ca:ea:9b:58:c4:41:d7:62:ec:
         29:c5:b8:c9:ff:3c:36:3e:b4:84:1e:fa:6e:2b:17:46:fc:30:
         87:b1:64:c0:b5:47:ed:0f:29:67:2d:ce:71:23:22:e2:e9:8a:
         9f:1b:23:5a:bf:d7:46:5d:ff:92:44:4a:96:9e:48:a0:b0:16:
         7c:64:2d:0d:d6:09:c9:99:8b:1c:56:a7:95:f0:46:46:41:44:
         ee:a8:da:e7:81:03:84:6f:cb:e2:c1:e9:86:33:03:38:39:91:
         80:09:ce:cb:5d:64:e3:dc:41:1e:63:53:82:18:41:f5:20:66:
         3e:29:1c:04:1e:ca:c7:82:0a:6a:39:d4:f8:60:2c:e2:0e:f3:
         6b:35:40:27:c5:dc:ec:08:b0:e7:ab:b6:0e:71:ff:9d:56:f5:
         47:39:50:0b:f7:2a:99:7b:62:9b:1f:59:ea:17:8a:87:04:3f:
         bf:2d:b9:69:2a:ee:48:78:f2:ad:b4:eb:b0:23:5f:06:fa:93:
         f7:58:ec:2d:4c:c2:8a:ae:55:35:7d:55:94:f4:6b:29:8b:57:
         56:f8:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:29:38 2024 by rpki-client on console-ams.rpki-client.org