Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa
File:                     e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa (raw, json)
Hash identifier:          w24y2kYyZ87W9VivAm+jhblZOsc9PfmgCc/fs6uo7rk=
Subject key identifier:   21:1F:58:B5:54:C5:82:89:9F:AA:0B:2F:2A:10:67:1B:AC:A5:F5:3B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584546247991B6F3B57CC74D6A00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa
Signing time:             Wed 20 Mar 2024 20:46:09 +0000
ROA not before:           Wed 20 Mar 2024 20:46:09 +0000
ROA not after:            Tue 18 Jun 2024 20:46:09 +0000
asID:                     36040
IP address blocks:        208.117.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:79:91:b6:f3:b5:7c:c7:4d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:46:09 2024 GMT
            Not After : Jun 18 20:46:09 2024 GMT
        Subject: CN=0703b840-7945-46e2-8aac-ef7be4e0812d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:a7:dc:3b:3e:8e:ed:b2:1c:80:5b:6b:e7:
                    20:f5:0f:f8:fc:08:19:c6:ba:30:0c:64:5e:b4:8b:
                    d8:f7:a3:c7:86:a8:26:a1:2d:4d:4f:c2:99:e9:15:
                    9d:01:10:c5:ea:74:bf:f9:13:58:28:29:e5:1c:0b:
                    be:ed:8d:3a:22:31:3a:54:e4:d9:c9:af:e8:40:de:
                    e2:42:e9:0a:52:b4:2d:4e:d2:ec:f9:6a:7b:d5:11:
                    15:1c:cc:75:fd:e9:80:22:74:c5:5c:12:e7:50:a8:
                    fd:a8:4f:3a:78:e7:18:2d:f9:17:31:83:08:86:ca:
                    e9:c6:a8:56:85:77:b7:1c:f9:49:5b:39:dc:45:00:
                    3a:a6:01:e6:ed:5f:32:9a:fd:1e:4e:ba:5d:e3:a9:
                    f9:26:c7:bb:c4:de:6c:f1:de:22:7b:1d:13:14:d0:
                    54:97:b9:fc:5b:be:fd:2c:3e:3f:37:3f:71:64:d2:
                    cf:34:9c:b0:5c:9c:5c:d0:00:29:c7:49:25:73:1e:
                    f9:51:77:3b:12:8b:51:91:3b:51:4b:5d:9c:dd:a8:
                    40:95:e7:43:3b:7c:d8:fe:8a:ab:eb:b0:87:57:7e:
                    76:1c:60:a2:74:df:50:d6:37:0e:a6:52:69:66:ef:
                    c3:17:2b:4a:56:ac:7c:83:41:04:ee:1b:d4:4e:6b:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:58:B5:54:C5:82:89:9F:AA:0B:2F:2A:10:67:1B:AC:A5:F5:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:31:95:4c:11:68:71:5f:f2:f6:fd:e2:44:08:16:3b:43:
         3d:ca:16:f7:9f:ab:81:86:60:2f:5f:38:5d:32:25:17:d4:83:
         f2:68:f4:ad:b5:a6:64:4b:55:c4:e4:7f:ca:4c:e9:0e:9a:a2:
         85:ea:c1:f4:56:97:45:12:49:6b:21:c5:5f:4e:3b:29:47:4a:
         ec:83:fe:cb:cd:87:89:88:f4:8a:b4:fc:b7:00:75:43:1e:cd:
         53:13:1c:26:8f:95:db:4e:bc:07:9a:f9:5e:b4:75:28:7e:1c:
         1d:7d:b8:1c:f3:65:2e:38:02:98:95:d8:cd:b9:c7:af:5f:da:
         cd:15:ed:ca:6e:31:ba:66:fd:55:44:5d:af:ad:61:4b:d3:96:
         88:c3:d8:21:72:15:47:65:86:7f:44:3a:68:ce:a8:06:7f:bd:
         da:9b:b1:08:02:1d:07:e0:03:98:d4:b2:f5:13:06:e4:1e:2d:
         92:75:30:43:98:5c:8d:d3:73:e4:56:19:e3:f5:11:9d:93:ac:
         f2:1c:e8:c6:d0:cb:c9:1d:fa:18:88:e9:3f:57:a4:f2:12:6a:
         d9:f6:bc:b1:c8:c2:e5:34:a5:87:69:87:93:39:2d:1e:43:1d:
         09:d5:aa:c9:ac:56:e4:d6:5f:b9:c2:90:21:7c:df:88:fd:a4:
         40:34:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org