Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
File:                     f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json)
Hash identifier:          ihLIhbrVdP1qiiGIg52pb1qmJMJ+3YGqvRvVqqmvQjg=
Subject key identifier:   DD:58:98:1D:3B:3B:9F:F9:0E:B2:B0:7A:E9:25:60:D3:D4:6D:A5:1C
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F43285845227599A734A8320FE4F77800
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     29909
IP address blocks:        216.157.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:99:a7:34:a8:32:0f:e4:f7:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=1291f89f-0345-47b0-b9f7-55fa768ba3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:d8:72:77:b7:ae:10:f6:26:bd:d7:1a:04:
                    fa:52:f8:a2:58:cf:2c:b1:91:ba:61:ba:fe:75:b4:
                    af:37:7b:dd:bd:55:ac:bd:49:e2:aa:41:1f:00:e6:
                    aa:c2:b3:04:85:8b:6b:83:0c:d1:2d:b4:e2:db:0d:
                    29:74:88:49:2c:5d:70:41:a3:96:4a:83:de:ce:e2:
                    ae:9f:2d:e0:c2:b0:94:0f:e1:77:71:e9:86:81:4a:
                    d0:50:ea:7c:ce:5f:b6:9b:61:22:00:04:9f:cd:d4:
                    2f:ad:aa:97:89:bc:9d:b8:74:a4:e1:6b:e1:a8:d2:
                    6b:23:c8:18:09:b6:6c:69:55:b4:ec:63:f3:7a:da:
                    6b:69:54:fc:78:77:70:54:82:3b:1a:ba:89:e3:67:
                    55:c0:19:f6:eb:57:20:04:9b:ec:63:23:73:58:4e:
                    bf:a6:0d:7f:8c:79:25:5a:69:8b:7e:e2:aa:98:da:
                    75:ce:6f:88:03:22:f2:56:c0:fb:6f:09:ea:99:76:
                    c3:5d:2a:63:ce:8c:95:af:1e:fc:8e:09:e5:41:04:
                    2f:49:c0:e8:c1:6a:38:af:17:dd:9c:b0:ed:6c:a7:
                    e1:f8:f4:ea:9d:c6:9c:2c:fe:e9:fa:a6:32:e4:e0:
                    99:e3:9e:ca:f5:db:72:44:6c:c3:be:f0:f8:fb:11:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:58:98:1D:3B:3B:9F:F9:0E:B2:B0:7A:E9:25:60:D3:D4:6D:A5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:da:77:35:52:f6:2c:d6:36:73:b7:3f:db:3e:50:f3:00:
         8e:ac:18:3b:92:fa:7a:56:70:cd:97:79:99:6a:bc:a9:69:4f:
         a1:a0:57:17:6c:1a:07:3a:f0:74:22:60:b4:fb:34:8a:a1:d4:
         7c:86:39:e0:26:4e:77:4a:e1:ff:64:0f:93:6f:20:6e:f9:d7:
         81:58:b7:07:6e:60:dd:07:75:c3:cf:6d:37:d1:88:62:0d:05:
         af:a7:f7:46:94:82:c3:d2:9b:e4:25:e6:89:e5:a7:19:6c:ba:
         fe:fd:72:cf:d1:1f:3a:c4:da:2f:4e:e3:f3:a3:13:f4:28:91:
         4d:ac:e1:a1:e4:c0:02:6d:ac:fa:a7:01:46:ac:bb:a4:50:f1:
         c9:50:d0:b1:f8:38:01:dd:a0:fa:5c:b9:dd:05:4e:70:4a:c1:
         b8:9b:6a:cf:ea:71:f5:4d:e5:17:88:be:aa:41:0e:a2:52:fa:
         d2:3e:4e:d8:57:e3:63:bf:f4:3e:40:4c:0d:9d:55:e5:ce:2d:
         b1:3e:4d:66:20:e4:3a:33:3f:4a:4d:58:61:99:f6:f0:cd:fc:
         42:03:a5:d8:ca:63:35:69:b2:e7:fe:ae:e7:30:a8:3a:a7:3f:
         7a:2e:48:9f:8a:1f:67:75:24:2d:80:45:cd:f6:0c:83:bf:bb:
         c4:18:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org