Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/804854e9-abc3-39c3-a831-2a04bc7050a1.roa
File:                     804854e9-abc3-39c3-a831-2a04bc7050a1.roa (raw, json)
Hash identifier:          6BEqZjHZdDMAxB/xZLfPuT2yIIxhO5+xtlEHFRnJtLI=
Subject key identifier:   8D:16:E3:2E:35:34:7C:A4:E6:3E:D0:E8:97:40:DB:74:88:02:DD:76
Certificate issuer:       /CN=b68f393e-4233-4428-ad05-67691bf3e046
Certificate serial:       010D0C9F432858458B088D216261DC179A23CD80
Authority key identifier: C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/804854e9-abc3-39c3-a831-2a04bc7050a1.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     8002
IP address blocks:        207.251.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8d:21:62:61:dc:17:9a:23:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68f393e-4233-4428-ad05-67691bf3e046
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=07e79bcb-9c1d-4965-b759-f05363243ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:3f:5d:ce:24:56:cd:9b:d4:aa:39:bd:37:
                    1a:9b:01:5f:fa:dc:c4:00:75:a2:45:a0:ec:96:75:
                    c5:42:3e:2b:39:f2:d6:e0:e6:ca:9e:76:a8:cf:95:
                    99:08:15:09:b0:3d:86:e6:12:1f:ae:a6:db:74:24:
                    57:dd:75:4e:23:67:2b:7e:a9:72:5c:c0:55:a1:a3:
                    af:7e:33:19:0e:53:53:f0:b1:ff:6a:5a:04:c2:d4:
                    fd:15:19:49:09:34:43:77:d5:2b:29:cd:4e:14:dd:
                    b6:5c:b0:f5:13:9c:99:0f:d0:ef:14:08:ca:86:12:
                    50:69:d9:66:e6:93:bb:e9:dd:35:80:86:d6:9c:9a:
                    04:eb:52:57:31:b8:26:6b:1a:3b:42:ee:9d:ad:4b:
                    5c:21:76:5b:eb:50:a7:a8:51:fe:fc:6d:1b:0b:b2:
                    45:1d:20:c8:f9:54:68:23:86:08:08:ff:a8:71:b6:
                    49:3f:4b:d5:61:01:a2:58:f7:88:b2:20:f0:2e:94:
                    9f:58:82:fd:d4:43:98:05:df:74:5b:f1:12:a3:e0:
                    1c:7c:d5:fd:f1:fa:4a:c2:41:ca:08:47:84:74:cd:
                    56:2f:40:8b:b9:06:be:41:1b:0d:4a:bc:68:9e:36:
                    28:57:2f:4d:a5:6b:36:c2:ae:3b:77:e3:c5:8b:bf:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:E3:2E:35:34:7C:A4:E6:3E:D0:E8:97:40:DB:74:88:02:DD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/804854e9-abc3-39c3-a831-2a04bc7050a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.crl

            X509v3 Authority Key Identifier:
                keyid:C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:64:bd:c1:1d:1f:00:15:f8:a7:27:58:b4:c1:4a:27:c0:
         f7:76:cd:cc:34:ec:8b:43:4c:5d:93:ed:38:c5:4e:7f:19:57:
         1a:68:a9:15:f6:c2:c6:42:06:39:0b:24:2f:f3:6a:c9:2f:89:
         60:26:a5:00:59:b5:ce:78:4b:9e:a5:6c:b8:87:7f:24:bd:b7:
         80:df:2d:c6:8b:60:0c:37:0a:e1:60:de:f1:13:75:7b:99:c3:
         57:72:a3:26:48:4b:5d:45:97:ff:ee:c0:ac:96:99:00:e5:85:
         ba:a0:81:9d:46:9a:21:d5:c1:21:22:43:b0:b5:75:a4:db:f7:
         34:1b:9c:a6:e9:14:82:b2:3d:bc:bf:e4:80:5f:5f:65:6e:aa:
         bd:d3:6b:cf:3b:d7:02:f1:ca:b6:75:da:f2:e1:80:a6:12:69:
         78:08:e1:cf:bc:9d:46:72:28:88:6f:2c:fe:83:86:d4:fd:65:
         a3:b6:e9:71:00:4e:3f:05:d7:34:95:b1:68:41:1b:9f:0f:f5:
         35:16:f1:ac:3d:bb:b5:17:81:73:34:18:b4:9d:56:e5:6f:39:
         35:a4:d6:c5:c6:94:4f:e5:ec:6a:01:8c:55:d4:b3:ba:66:64:
         01:07:6a:4f:dc:01:24:38:f4:17:eb:4a:d1:1a:5a:fe:7f:e5:
         6b:46:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:34 2024 by rpki-client on console-fra.rpki-client.org