Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
File:                     685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json)
Hash identifier:          oX+xnuoRe0fyEe4P0Dd06z7qgxx1bvLAGgvBZsvHq5I=
Subject key identifier:   38:E0:A4:78:AC:F7:E3:7E:3A:76:AE:C4:5D:6A:68:4D:64:B6:D3:64
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584538AD454FB961CF332669A740
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     394141
IP address blocks:        206.57.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:45:4f:b9:61:cf:33:26:69:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=a5f909b7-6ad2-4682-896a-c6823aacd988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:fe:6e:d1:1c:f8:94:40:2b:39:29:28:c9:
                    40:31:3f:c0:fd:19:42:62:44:20:92:6f:4d:74:8d:
                    bc:95:14:2d:de:05:2a:20:c1:c2:3a:f9:6d:b5:64:
                    0f:20:8d:dd:fe:b7:48:b2:1d:80:22:87:e6:da:89:
                    a2:e0:b6:5a:e5:b6:ae:37:15:d9:0e:a8:6d:70:ac:
                    9d:05:71:9b:f8:09:97:00:68:ec:85:f4:a5:af:0d:
                    6d:54:8e:bd:47:a3:f7:05:65:04:a9:c7:e4:cc:c3:
                    92:e0:c1:dd:81:81:52:24:f1:df:a2:62:33:c5:72:
                    09:fa:1e:cd:d0:b4:fe:00:6c:0f:4e:c3:1c:66:50:
                    b4:bd:da:10:86:62:73:a1:52:0c:7d:5f:98:b0:91:
                    e5:cf:61:6f:25:d8:17:0f:7f:95:e7:b5:87:5e:29:
                    10:3f:4f:8d:91:b5:5f:89:a0:59:79:a0:3b:e0:fd:
                    e9:2c:2d:6e:02:f2:18:ce:76:36:9a:d0:9c:fe:15:
                    e7:eb:77:ee:41:84:29:17:3b:be:67:da:9a:03:30:
                    d0:e5:bf:38:8d:97:4f:2e:8b:71:d8:7c:45:8b:22:
                    87:7a:9c:f1:f8:93:3b:bf:a5:74:c4:43:f1:f2:c7:
                    49:90:a8:ed:17:c4:2d:de:c8:07:4b:f1:a2:9f:a4:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E0:A4:78:AC:F7:E3:7E:3A:76:AE:C4:5D:6A:68:4D:64:B6:D3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:e9:ce:89:3c:fe:f3:38:e5:97:2c:83:64:33:6d:cd:4e:
         b7:8a:5a:a2:03:9e:e8:58:64:cd:cd:ef:65:64:24:14:d0:27:
         d3:7b:96:04:a6:93:73:5a:f9:36:1d:cb:9d:24:9d:46:b2:a2:
         03:bb:e4:93:9d:e4:41:84:70:69:84:5f:e6:b7:13:d5:37:a3:
         7e:31:be:89:04:40:57:8e:3d:12:af:74:63:36:18:38:85:7e:
         ae:cd:b1:e0:f2:a4:b2:16:9a:ff:6e:ff:dd:10:6b:2a:b5:05:
         83:65:06:e9:01:21:5a:d1:c8:12:09:31:cf:14:d8:30:bd:70:
         d9:2c:14:60:26:61:c2:0b:cd:97:29:22:d4:04:2c:65:1e:73:
         84:f3:64:9e:6a:b1:50:fb:ae:4c:a5:2c:83:78:ef:d5:77:99:
         7f:87:37:3a:b0:5b:ec:02:4d:ae:11:18:74:d2:b1:e9:d7:77:
         f9:bf:67:67:88:f6:1e:99:9d:46:37:96:c9:22:96:10:87:13:
         e9:3f:a3:dd:24:16:e3:4d:0f:fd:61:2c:fd:8e:46:04:52:96:
         a9:34:07:51:1f:c3:ce:86:97:18:79:b1:50:3f:76:00:93:cb:
         41:b0:fb:63:62:a3:5b:22:d2:cb:9e:28:08:68:59:8c:4b:d8:
         13:fe:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org