Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
File:                     abf701ec-494a-39e4-b346-585255e4aae7.roa (raw, json)
Hash identifier:          0kfEL+kAgvXf2mqlkEuGhh9MHUaebw8NYu7Z8xK8nco=
Subject key identifier:   3F:E6:A9:4D:E5:67:0D:E6:D2:0E:EF:6E:16:83:D6:21:DE:43:05:E7
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F43285845CE090C5C8BC824BDD1CB7980
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     19782
IP address blocks:        163.245.0.0/16 maxlen: 24
                          205.215.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0c:5c:8b:c8:24:bd:d1:cb:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=fde800c2-9e12-4c7b-ae20-7be27395cd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:cf:6b:03:54:83:22:6f:47:75:1b:15:09:
                    4f:7f:1d:73:6c:43:75:12:17:60:fb:a9:b3:1d:ea:
                    55:09:c3:6b:10:30:45:23:fe:de:9b:ad:a4:83:a6:
                    e5:fc:b7:c6:12:86:0c:61:d6:a2:37:61:f8:14:52:
                    8b:5f:18:62:0c:8a:bc:80:68:63:d4:ed:ed:ee:92:
                    62:cb:31:1a:88:2c:6c:78:c7:b8:12:70:45:76:d0:
                    ce:a0:6f:09:d0:a5:e3:12:5d:18:70:b8:7b:8b:67:
                    42:7c:e2:3f:ae:eb:bd:28:f1:87:a1:21:27:ce:66:
                    34:fd:ed:62:29:fa:95:de:8c:ef:99:62:82:a9:17:
                    b2:6f:3b:ad:fa:20:f3:48:8b:70:70:71:97:02:89:
                    3e:ab:19:15:53:e3:3a:bd:b7:30:ac:7d:03:67:4a:
                    e7:86:1b:73:52:cd:91:a9:d4:6c:05:7b:99:15:ac:
                    58:48:44:c3:24:1f:cd:c1:96:f7:6e:42:0a:5c:c8:
                    68:bb:20:89:e7:8e:39:2f:54:12:92:2d:93:af:1c:
                    88:2b:3e:13:cb:4f:62:cb:2f:67:91:6f:b5:f2:91:
                    2b:4b:c1:5a:f7:96:eb:ba:ab:ed:56:20:2d:da:e6:
                    34:db:cb:6a:cc:92:42:10:38:42:24:59:71:9a:36:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:A9:4D:E5:67:0D:E6:D2:0E:EF:6E:16:83:D6:21:DE:43:05:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.0.0/16
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:94:29:63:15:5b:63:61:82:f5:fd:23:c8:56:6f:fb:2b:
         28:cf:cc:fd:ff:c1:47:40:05:65:9c:ab:65:3a:fb:b2:5f:84:
         25:c2:ca:db:cd:ef:51:6e:94:15:84:6d:54:0b:58:34:d1:53:
         5d:47:aa:5b:9c:88:57:08:ee:05:63:e9:1c:30:33:55:f1:ce:
         b0:0f:8d:69:b1:60:46:43:de:b2:d2:51:f0:76:ad:48:6f:56:
         5c:c8:9d:05:4f:c8:7d:b7:01:a7:0c:70:f1:34:69:ce:72:da:
         57:0c:a7:cc:28:e2:ee:e2:df:93:11:f6:2c:47:e2:7d:60:b6:
         a2:05:9c:7f:fe:a5:90:9b:85:b6:fa:81:2c:e5:1b:fa:ad:f9:
         12:95:11:69:e9:85:fc:0b:db:f7:6a:e7:86:02:29:70:a1:c1:
         e1:cc:51:e0:1e:e6:06:bb:2c:40:0b:86:12:1d:ee:95:39:ff:
         40:17:9d:14:b1:22:41:15:b7:d0:e4:c0:45:c7:4a:52:d5:ba:
         1a:d4:b6:fc:6f:98:c5:d5:16:58:33:7a:c1:30:88:6d:fc:e3:
         0c:ac:3a:b2:e8:9d:29:d6:66:1d:d8:66:03:d8:6f:12:fe:22:
         ed:c9:9e:7d:94:36:7c:f2:f2:c9:51:9e:3f:fc:41:12:35:67:
         f4:af:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:08 2024 by rpki-client on console-fra.rpki-client.org