Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
File:                     a3af340a-151f-3e65-b202-a86ab76e7ddc.roa (raw, json)
Hash identifier:          HQuEXOFSofeg7a1PLyUuORJYMzcoWrfbidwRwmJiYhI=
Subject key identifier:   F8:1E:AB:5F:41:6F:4A:E6:A6:B3:2F:F8:05:92:E3:A0:8D:FB:24:3C
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F432858454AD2CDE1DDFA77C4C9832260
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     16433
IP address blocks:        170.176.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cd:e1:dd:fa:77:c4:c9:83:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=1ddc0e53-8b3a-4f07-9772-b4f022373ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:0a:46:b7:42:c8:c9:7a:3b:93:d9:a0:7b:
                    f1:17:ca:62:aa:a1:a6:55:2d:30:b7:26:41:39:3f:
                    26:1f:2e:22:78:08:a7:e2:20:fc:97:10:24:59:70:
                    e2:db:81:a8:fd:15:c7:ca:c0:1e:96:db:45:47:68:
                    08:a0:8b:13:3c:3c:bd:f5:64:3e:a7:ab:fc:3d:1b:
                    ac:83:be:ed:59:29:40:67:ce:c7:bc:f7:f6:9d:89:
                    57:28:74:12:0a:32:cb:1a:68:22:0a:56:da:72:09:
                    4a:0e:73:d2:39:ec:3d:f1:4b:5c:db:1e:c1:02:66:
                    e7:a0:05:ed:c8:e1:c6:83:c7:92:48:23:eb:18:cf:
                    e5:b6:24:c8:bb:b2:aa:f0:f0:03:74:c0:27:97:b9:
                    e5:2d:a2:09:b0:6e:ba:0b:e7:40:89:b2:c8:38:90:
                    97:34:d2:dd:19:3a:a7:5d:89:8c:9a:30:4f:d2:77:
                    6f:a9:2b:1f:90:aa:56:f6:e2:3c:8d:58:b8:ba:3d:
                    83:4d:ce:8e:41:18:74:70:a7:13:6a:8e:3b:f7:83:
                    b7:f4:5e:0d:25:55:c1:7b:08:af:32:be:03:03:56:
                    ce:a8:47:b9:15:90:57:c6:25:88:0d:83:e6:42:b1:
                    3b:8a:f8:2f:2d:f8:4a:a4:53:8c:a6:bf:ba:c5:d0:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:AB:5F:41:6F:4A:E6:A6:B3:2F:F8:05:92:E3:A0:8D:FB:24:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:36:58:b3:0d:94:39:03:7a:03:af:44:67:66:01:53:bc:3d:
         a8:31:a7:dd:9c:51:55:40:29:08:1d:13:33:e7:85:0c:81:f3:
         12:8e:01:b5:58:3a:af:46:3e:b4:a8:ac:71:b7:4e:5f:1b:f8:
         6c:b5:7a:a4:a7:d2:5b:92:c5:92:9f:8f:45:db:3c:d2:d6:b2:
         a5:f5:3a:ac:53:a8:64:56:63:d6:1d:b8:58:3c:f7:20:2c:f4:
         08:2c:75:4b:b0:2f:57:44:33:c5:dd:37:05:b8:d1:e1:d9:2f:
         c7:5c:34:57:1b:32:f6:b1:92:84:a5:ae:d8:78:d0:5e:85:5f:
         45:8b:0b:66:de:ab:3e:f5:31:46:3b:8a:aa:27:f2:c8:9c:57:
         62:09:9a:cf:db:b0:bf:07:9c:bb:d9:7f:f6:5e:1f:be:01:02:
         0b:b3:0a:e9:74:9e:a8:88:d0:0a:ca:8f:09:ba:20:b8:da:51:
         90:81:e0:48:f1:3e:60:e9:6f:e9:d1:29:d6:1e:c2:43:33:52:
         0e:04:3f:b1:72:e9:75:18:3f:d9:a2:da:98:ab:9e:b2:7d:46:
         ec:ad:e9:13:bb:ff:19:7a:71:d5:2e:22:2f:03:36:2a:6f:8f:
         25:b6:5c:0e:3a:b5:6b:0d:fe:91:5d:94:ae:3b:79:76:60:e8:
         fb:06:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org