Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
File:                     01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa (raw, json)
Hash identifier:          kbAt2pRBCUi7u58F7x2x7WgiDKFLDed7+O9zDrXB2ZI=
Subject key identifier:   B5:0C:48:B3:4E:01:B4:56:B6:A6:77:F9:D9:07:E8:68:ED:A9:C3:30
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F43285845AB234F5F77C81155031F8980
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     22066
IP address blocks:        205.213.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:4f:5f:77:c8:11:55:03:1f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=328920bb-3ec5-4dc0-a1c1-2ae2cf926606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:2c:e5:8b:a0:ee:6c:ad:6e:98:17:55:29:
                    2f:21:30:bc:04:26:dd:71:1b:84:46:68:9f:e9:05:
                    ef:3f:3e:1e:6c:e5:7b:8f:71:13:f8:e6:84:0a:fe:
                    10:d8:2b:66:ea:4b:65:cc:4b:90:54:65:e9:b8:cf:
                    9f:91:3b:fe:f0:90:cb:b4:b6:51:5c:1d:8e:15:1a:
                    31:9f:84:c7:3a:f1:5f:c8:09:6e:5a:84:dd:87:46:
                    9d:55:7f:ad:a7:91:dc:5d:21:e7:51:68:c4:80:b5:
                    3a:86:c2:f0:ae:29:ab:49:fd:cd:fe:c5:ae:16:84:
                    b9:cf:c7:db:37:bd:04:c3:3f:60:d2:61:74:1a:3a:
                    86:36:4e:a9:79:6c:13:df:3a:4d:6a:82:c4:0e:6e:
                    2a:76:be:95:32:60:d8:2e:20:cb:62:32:8e:09:20:
                    f4:e6:29:e3:f8:e7:b0:eb:27:ff:5a:2e:c7:17:ef:
                    68:fb:a6:b8:c9:a9:30:57:05:16:89:88:f5:46:95:
                    26:8f:1f:17:3a:9e:66:67:17:c3:4c:db:a4:59:99:
                    c4:f7:ac:c2:52:f2:59:fa:d7:7b:b8:e9:55:16:96:
                    88:4c:0c:5c:5b:d5:e7:a8:0d:80:c5:ee:02:6a:10:
                    27:ff:08:61:af:e2:35:5d:ad:e6:ad:2e:9b:44:f1:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:48:B3:4E:01:B4:56:B6:A6:77:F9:D9:07:E8:68:ED:A9:C3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2a:0e:62:fd:77:b9:96:32:a3:f3:7d:ee:61:80:1c:b7:69:
         20:df:7f:9c:33:06:d7:30:ed:e0:f0:11:22:0e:b5:02:ff:6a:
         66:f4:5a:c5:2c:bb:c3:d2:9f:a1:5d:76:66:f0:fd:68:8c:53:
         a3:d0:c4:c3:7d:85:d6:db:16:9f:8b:3e:db:fc:25:bc:52:3c:
         47:6c:85:af:9a:8f:09:74:51:87:c5:eb:f5:f3:45:f4:34:ee:
         aa:77:5b:a8:68:9b:34:1f:1d:6c:e0:a6:77:1f:e6:49:cc:5c:
         94:b9:13:92:7a:ca:f8:5c:88:86:9f:9d:8c:c5:04:aa:62:40:
         ac:2e:ae:6a:46:ca:11:0c:c8:79:4b:e6:85:28:35:a6:5a:d8:
         ed:ad:8b:af:b2:f1:c3:b4:85:2b:76:8e:6a:ce:07:e0:10:b2:
         c4:ff:ef:49:e2:8d:22:2b:5d:f4:30:47:02:fa:95:4a:0c:91:
         5c:cb:f9:f6:cd:fa:f1:a3:1e:59:eb:30:8e:ed:c2:89:72:c7:
         9c:12:a5:a4:10:ee:50:7f:6f:18:f0:09:cd:63:f7:28:5d:4d:
         17:48:91:64:a6:30:e5:34:d0:4f:72:a7:37:8b:46:86:d6:9a:
         17:82:b1:4c:ce:8a:17:5f:c2:e7:84:f2:5f:ab:a4:eb:1d:ae:
         9e:99:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:55 2024 by rpki-client on console-fra.rpki-client.org