Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/53d9289b-1dcc-32e7-b42f-8d8efe40faf5.roa
File:                     53d9289b-1dcc-32e7-b42f-8d8efe40faf5.roa (raw, json)
Hash identifier:          8F+7DiIMyrZ1l2T7FPYrcgoJ8ImeGhAF0YLbXlm0u4Y=
Subject key identifier:   AE:B6:11:F8:4E:20:BE:BA:DD:3C:70:2D:B4:97:E8:5C:13:DF:E6:BA
Certificate issuer:       /CN=b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59
Certificate serial:       010D0C9F43285846513F431EAFECCB0FACFD2B00
Authority key identifier: 6A:2F:81:03:3C:D5:6D:3F:A2:D1:CB:2F:88:81:66:B9:AD:CD:ED:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/53d9289b-1dcc-32e7-b42f-8d8efe40faf5.roa
Signing time:             Mon 24 Jun 2024 13:00:34 +0000
ROA not before:           Mon 24 Jun 2024 13:00:34 +0000
ROA not after:            Sun 22 Sep 2024 13:00:34 +0000
asID:                     31827
IP address blocks:        216.252.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:3f:43:1e:af:ec:cb:0f:ac:fd:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59
        Validity
            Not Before: Jun 24 13:00:34 2024 GMT
            Not After : Sep 22 13:00:34 2024 GMT
        Subject: CN=02005752-4c11-4a79-8e69-794754271719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:a3:43:e0:76:13:99:7a:9e:c8:e2:4f:14:
                    22:8a:e1:86:bc:0b:aa:ab:43:46:c7:95:05:55:a4:
                    bc:15:ac:b4:18:61:cd:f7:47:86:c6:cb:2c:eb:be:
                    7b:de:73:4b:a1:4b:08:2f:69:21:dd:28:c5:ff:69:
                    76:34:eb:b5:11:f4:99:85:7e:38:75:f6:04:d0:f9:
                    c0:58:93:94:c8:5c:67:3b:4f:ac:a6:2f:95:5b:54:
                    18:49:4b:1d:82:b1:71:65:82:29:ba:04:c3:8b:24:
                    70:bf:75:49:fe:56:f7:15:06:ef:86:67:7e:0a:52:
                    2d:64:47:8c:54:cf:60:7a:c7:00:8c:d4:c1:81:9a:
                    6f:0e:b7:a9:c6:ee:df:3d:9c:83:66:7c:43:e6:56:
                    12:41:43:d8:47:88:16:4e:80:ab:4a:76:d8:e9:70:
                    a8:85:d0:41:63:6d:0a:35:16:df:68:27:a6:0f:82:
                    e9:34:55:57:dc:56:56:05:50:97:cc:a8:6a:59:3f:
                    27:ca:bd:69:36:4e:3b:fb:8c:a3:9c:14:7e:0e:29:
                    fd:3f:ca:93:36:36:32:12:f4:9f:40:d5:86:a3:01:
                    f4:45:4b:2f:b2:18:3f:31:ab:d0:37:8c:47:c6:35:
                    09:41:f5:7d:89:b5:ff:f5:2c:77:b6:19:14:26:46:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:11:F8:4E:20:BE:BA:DD:3C:70:2D:B4:97:E8:5C:13:DF:E6:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/53d9289b-1dcc-32e7-b42f-8d8efe40faf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:81:03:3C:D5:6D:3F:A2:D1:CB:2F:88:81:66:B9:AD:CD:ED:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:a8:b6:a6:14:7a:f4:0d:5a:2c:ac:04:2d:63:08:ed:f9:
         88:83:37:46:9b:79:b1:58:dd:60:d6:a1:bd:1c:8b:ca:e0:02:
         cb:1a:e5:34:68:2d:b2:64:cf:e4:b9:b2:1d:74:81:2a:64:bc:
         9b:f1:3e:e0:7b:51:41:f5:5c:4e:0a:4d:5a:81:1d:b4:54:7c:
         e0:0c:42:47:ba:83:f9:e6:63:11:93:37:64:0e:a7:81:8f:02:
         92:72:b7:68:86:57:7b:c8:0c:bb:c5:a8:df:14:99:06:2b:0e:
         ad:87:8f:05:bc:43:0d:99:76:cf:ce:d1:c1:87:04:0e:f2:58:
         69:6c:51:ce:99:83:85:13:89:03:df:d3:67:d8:08:28:7b:19:
         ee:c7:3b:bd:cf:8a:03:d8:82:50:da:74:41:10:a8:93:ab:28:
         57:60:cf:a2:7f:15:cd:db:50:e1:b5:4e:12:0e:1e:c7:ff:50:
         6c:ab:ec:04:a8:b2:22:57:4b:8c:3a:24:3b:bb:aa:92:2f:ef:
         5e:ed:2f:84:ff:e2:99:15:3c:2f:af:29:f3:be:07:62:75:f7:
         e6:2f:fe:2f:0f:23:96:62:de:e0:31:f3:8b:df:0b:81:0e:c7:
         84:4e:11:95:28:6d:7b:39:06:24:db:73:fd:ec:f3:0c:53:a0:
         02:50:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:05:41 2024 by rpki-client on console-fra.rpki-client.org