Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa
File:                     e087c521-5034-3635-8959-9eef60d95ac7.roa (raw, json)
Hash identifier:          2rIA90ECc8olkxTXZb4J0ImJv+fU3zSxF5C7QY0fTGE=
Subject key identifier:   04:D2:48:84:CB:47:B1:0D:91:BB:7E:16:A0:11:2D:FA:19:53:C0:5D
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F432858452AB7DF78ADEC6E897BFD3E00
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     393581
IP address blocks:        206.57.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:df:78:ad:ec:6e:89:7b:fd:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=f7f818da-141e-4946-9e54-3e27c50ae98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:1b:78:2f:ba:2e:79:9d:3b:33:f3:9c:25:
                    94:c6:85:b3:a8:c7:25:df:d6:a3:cd:88:de:eb:44:
                    d2:1d:0f:ec:56:87:d1:f2:f3:c7:4a:b9:ad:bb:41:
                    74:1d:42:d6:03:72:9b:2b:1f:03:9e:3d:46:c4:50:
                    f4:18:7a:62:54:af:66:3e:ca:22:09:3c:8e:08:9d:
                    69:d7:6d:e2:50:43:3d:4a:e6:b6:fa:19:76:a3:d2:
                    28:a0:61:4b:49:d5:2c:aa:89:c8:56:8d:b2:f9:8b:
                    81:63:19:ea:f1:0a:8d:6f:59:43:ef:96:ca:a4:76:
                    34:97:fb:84:88:32:7e:5a:4d:1e:d3:0e:34:f3:c1:
                    bc:e5:c1:6b:c6:31:5b:8a:f4:d9:87:fc:b0:30:96:
                    78:9e:60:2c:43:6e:84:6d:96:47:ca:0d:01:cd:a7:
                    43:68:40:0e:1d:ea:d4:67:aa:7e:20:f6:d7:0b:76:
                    39:85:7a:d8:0e:18:04:23:65:42:9f:36:85:a0:00:
                    f9:83:73:47:4c:bd:92:18:75:b0:81:a7:90:60:66:
                    fb:b9:0c:09:fb:d8:50:bc:a7:64:ca:3e:80:b7:0c:
                    f5:ae:ad:f2:88:c2:cb:09:cb:07:18:17:40:6d:29:
                    ed:22:b8:58:69:34:38:df:a1:0d:16:82:66:5e:ec:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:48:84:CB:47:B1:0D:91:BB:7E:16:A0:11:2D:FA:19:53:C0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:f9:e0:40:a9:32:bf:7d:55:b0:50:ce:ac:d9:be:6d:ae:
         28:cb:9e:58:fd:79:27:70:b8:3a:12:c5:5e:2c:ad:d7:78:b1:
         b7:9f:dd:33:84:19:62:69:65:45:84:b9:4b:30:c0:1d:7e:8d:
         49:47:a7:97:d6:06:ea:9a:62:79:8f:f7:72:33:0a:ab:42:2c:
         83:ea:62:02:b3:e2:4a:d8:8a:2d:78:ee:09:0e:d7:9c:6b:67:
         e6:13:da:aa:63:28:41:f9:62:6d:d9:bc:11:99:6b:31:77:15:
         8e:ba:ce:86:63:82:1f:02:87:7a:df:75:b5:19:62:00:cc:6c:
         01:20:50:3b:a3:f6:50:7a:db:9a:b6:10:38:69:f6:bb:55:1f:
         a2:ab:a1:bf:1c:0f:7f:1b:10:f5:39:4a:b3:25:18:c1:35:7b:
         06:8b:f9:86:8f:26:f7:be:f3:e9:25:62:f4:7c:63:ee:e7:c6:
         3c:12:e0:07:80:3b:33:e8:7c:d2:65:c9:ea:e1:04:25:bd:03:
         72:6d:a1:e0:31:7d:18:76:16:2f:fc:2a:76:43:58:5f:f1:99:
         3e:58:93:28:43:98:9e:21:a5:3c:b5:28:23:3f:12:2e:00:d4:
         f1:b9:a3:2f:26:21:0a:aa:c4:11:ba:cd:24:66:76:8b:6c:29:
         65:87:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org