Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa
File:                     5819b85c-1290-392c-af04-a578ef8c63f4.roa (raw, json)
Hash identifier:          L94YRM1O10ZJ7llX2HWqxMxqmQSQQfHzm1J8KbCufN8=
Subject key identifier:   7C:24:FC:80:6B:CE:E7:7F:43:F7:DF:F8:62:C5:B2:92:E2:9F:80:F3
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F432858454AD2CDBA4FB37E134BB83F00
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     16433
IP address blocks:        162.43.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cd:ba:4f:b3:7e:13:4b:b8:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=42d7db2a-fc22-4168-898f-5d0cbc17c701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:7c:de:a5:7f:f6:08:2e:56:cc:95:c4:52:
                    48:d2:dc:ae:bc:af:80:08:68:f2:8c:d2:36:30:5a:
                    a6:b1:63:17:ef:84:ec:24:8e:b7:ac:df:17:51:9b:
                    0a:3f:53:2a:9d:26:35:19:b7:56:21:27:25:16:06:
                    9f:f6:8d:b9:a9:8c:a6:4f:61:98:72:ad:5f:87:25:
                    25:ed:8f:6a:4a:41:ee:2f:70:41:7e:ff:a9:ac:e0:
                    b7:38:e9:18:ec:42:f8:f4:e3:b4:b8:8f:55:15:a0:
                    33:df:75:83:99:6d:d4:76:55:6e:f0:fa:4d:28:40:
                    60:0f:6f:89:c1:cf:55:50:ff:0a:76:98:59:15:50:
                    7d:58:99:60:54:32:24:3f:28:99:88:96:24:51:0f:
                    2c:52:8f:db:82:8e:d9:10:b8:cd:32:94:ed:32:62:
                    ec:3b:09:a7:94:15:fd:91:07:fc:e3:de:42:cc:3f:
                    85:69:3c:12:fd:89:cb:88:1f:81:f4:e7:08:50:09:
                    99:80:df:ec:3e:53:72:fa:46:f0:e1:04:11:bf:55:
                    34:5d:ef:e5:97:ff:80:9e:62:3c:46:e8:99:77:b1:
                    3d:88:40:8a:53:86:99:b2:1b:a5:88:d2:bd:9c:7c:
                    cb:13:fe:2e:15:fc:c2:66:9a:20:b5:53:33:8c:49:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:24:FC:80:6B:CE:E7:7F:43:F7:DF:F8:62:C5:B2:92:E2:9F:80:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:41:ca:01:a7:12:fa:80:df:b3:21:ac:d3:5d:67:56:2a:4f:
         45:31:9c:51:41:5f:d3:a4:42:36:43:ac:f8:ad:ac:32:6d:85:
         0c:d7:0f:45:18:5d:ec:91:74:3f:b6:3e:36:c0:bd:2d:1d:c6:
         8d:01:e6:18:19:8e:54:55:1a:c7:ce:12:e4:c5:d3:00:ff:42:
         44:ca:82:36:69:e9:fc:73:43:bb:d7:fa:41:ff:e5:d7:2c:33:
         c4:02:4e:60:54:72:bc:c5:3e:a6:34:bd:08:35:4b:8f:91:db:
         92:08:6a:f4:d9:8d:59:17:43:11:11:a0:15:8b:75:f1:bc:e3:
         e8:b3:87:8b:83:0d:76:e1:bb:94:7d:4d:b6:da:5a:98:58:da:
         d9:9e:25:9d:2e:90:10:33:73:95:59:7b:60:6d:b0:ba:29:db:
         93:4a:db:10:87:c1:d5:ab:4e:3c:d5:98:f8:d4:fd:1f:aa:e3:
         a6:65:6b:91:e5:3e:d5:5f:1b:c9:bb:b5:28:8e:c3:2f:19:0d:
         28:9a:bb:57:ca:6b:3a:cd:78:c4:eb:98:58:d5:09:c5:94:68:
         9d:e2:69:44:4a:80:47:45:26:49:c5:d3:3f:d7:da:be:3c:e1:
         99:1f:98:94:ce:b2:d5:01:b6:e2:9e:1b:5b:54:60:92:b7:20:
         18:5c:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:25:59 2024 by rpki-client on console-ams.rpki-client.org