Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5595b35e-dde4-39b7-8769-7c49251266aa.roa
File:                     5595b35e-dde4-39b7-8769-7c49251266aa.roa (raw, json)
Hash identifier:          0lC7tTG1rJ7cMfBN4l7XbMisC9DQBqBx7hYV+LNKeGg=
Subject key identifier:   CA:8C:18:11:A1:00:F5:3A:58:46:5A:F3:AF:94:68:3D:59:29:86:AC
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F43285845A15E1C2D5707042805D2BBC0
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5595b35e-dde4-39b7-8769-7c49251266aa.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     212271
IP address blocks:        208.65.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1c:2d:57:07:04:28:05:d2:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=98435a33-161e-45f2-8dfb-9a4f161e9e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:f7:7c:18:69:56:f2:ac:b9:a6:19:3d:08:
                    28:a4:77:a0:0a:40:2b:c1:84:e7:5e:b5:da:03:3a:
                    ce:4a:df:f5:44:3f:04:a3:b2:81:5f:07:27:23:e0:
                    a5:64:a4:b5:11:3e:44:28:f4:2a:71:fe:d9:b7:85:
                    0d:45:6a:99:b1:25:0e:80:f0:a2:48:78:fd:e1:6e:
                    9a:59:58:0f:d0:37:b3:3e:94:25:39:ce:2b:f0:c8:
                    f6:a0:d1:e6:5d:f4:16:cd:8f:1c:d5:c2:58:9c:bb:
                    d2:35:8b:ce:1f:68:c0:cc:36:ad:d2:f9:a5:fe:03:
                    f0:91:b2:fe:f5:bf:5b:8f:e6:19:6a:fd:1e:ec:54:
                    1c:7e:5b:06:16:53:68:f8:a3:d4:9e:00:28:d9:d9:
                    b9:1f:cc:06:43:87:54:5d:84:64:94:54:b4:b7:86:
                    c3:54:6a:c0:d3:0c:68:97:d0:79:e0:48:21:3b:f3:
                    37:d1:ff:da:02:cf:fb:18:ee:1a:0b:d1:40:c8:33:
                    f4:b6:38:e6:25:01:2c:eb:87:03:61:8d:a8:3a:69:
                    ff:87:c1:e0:14:6e:98:fa:42:91:ea:b8:56:a1:89:
                    30:b0:3a:61:8f:02:87:b6:8a:cb:ec:da:0c:99:46:
                    9f:86:56:3d:9b:93:e6:e7:3b:c2:c4:f7:51:c9:17:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:18:11:A1:00:F5:3A:58:46:5A:F3:AF:94:68:3D:59:29:86:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5595b35e-dde4-39b7-8769-7c49251266aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:54:c3:33:f0:3d:bd:4e:56:b4:48:05:05:59:97:da:b3:e3:
         9b:be:3c:fe:d4:d1:5a:da:9f:61:fe:1e:3c:90:e2:f5:22:14:
         01:b2:57:2d:99:75:4e:81:5c:cb:68:5f:72:c6:5d:48:0b:c4:
         f7:5c:3d:00:a6:f8:9d:2c:0b:3c:70:38:d7:f4:c1:ca:fc:18:
         34:c2:f9:11:75:b4:fa:d9:50:92:75:5f:67:0d:10:74:9c:9d:
         95:6e:5c:9f:f6:0a:93:5c:38:74:34:6b:3b:d3:13:1d:bf:1e:
         f2:3d:05:3f:11:40:af:89:8b:95:04:03:b8:b7:11:d7:1d:b3:
         91:01:37:dc:aa:a0:fb:69:bd:1e:cc:cb:f2:4a:63:df:9b:4b:
         dd:17:c3:52:4a:b4:35:34:b2:ac:dd:38:30:fe:d6:85:57:d8:
         24:27:73:bf:56:6b:ab:fe:3f:e9:a9:2a:e5:bd:67:e1:76:f0:
         f6:4d:dd:b8:d0:fd:f6:44:ee:1e:57:ad:6c:b9:99:a9:65:92:
         0b:a8:cc:76:2d:0e:59:a8:2c:91:c8:8b:00:07:28:3c:68:97:
         af:3f:86:28:75:d3:40:56:1e:05:12:ba:d5:12:f1:80:4c:4e:
         ab:46:40:88:9d:7c:9d:b5:ad:d9:3b:02:c2:78:b9:61:f5:b2:
         aa:22:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:50:28 2024 by rpki-client on console-ams.rpki-client.org