Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa
File:                     c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json)
Hash identifier:          LbsHupJYoJfJKrFWuVoxXhxEf1+t86ExdsWu10PA7vw=
Subject key identifier:   E5:FF:5A:AE:1B:58:C9:66:25:93:E7:0E:57:33:F0:EA:B4:77:AA:F3
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F432858456C5323A504FE610A4E608940
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     205627
IP address blocks:        170.2.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:23:a5:04:fe:61:0a:4e:60:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=b7e29ba7-9b91-46f8-b51e-227246ca0f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:59:35:fe:7a:ba:4c:bd:83:37:92:40:8a:
                    03:1b:76:ee:cd:e8:02:75:63:10:35:e1:a6:18:10:
                    0d:48:d4:e7:08:4a:bc:d8:09:d7:e6:9d:e3:f6:d5:
                    22:d2:f3:dd:49:ec:93:b7:40:54:a2:e2:6b:df:72:
                    2e:a0:68:26:f9:91:ef:6b:92:da:73:9b:3e:e6:9e:
                    ad:e1:b4:91:81:ca:e5:15:9f:9c:e1:52:0d:5f:69:
                    e7:2a:ce:04:dd:b0:d8:a2:e7:51:37:73:b6:80:b4:
                    ea:9e:e8:10:90:07:9f:4d:cc:c8:a3:2c:99:48:33:
                    e6:6f:d0:0e:ed:ec:a8:ea:6b:8d:83:48:a6:07:85:
                    33:1c:c2:db:af:85:61:1b:9b:d3:8b:ab:de:90:fc:
                    22:8d:e5:c0:15:f8:71:75:b0:3c:fe:29:ea:28:1e:
                    36:ea:37:66:c3:2c:42:5e:85:31:77:8e:6d:01:a7:
                    91:02:e2:1e:45:86:58:5b:3d:6b:66:3d:9b:52:a7:
                    90:9f:15:0d:fa:7d:3b:70:8a:ac:43:fb:59:16:95:
                    50:9b:81:63:60:7a:f2:55:23:db:26:ec:a8:5e:61:
                    f2:64:7d:d6:89:83:57:70:3a:02:52:2f:0c:4d:8e:
                    8d:a1:0e:5e:95:38:50:ee:17:61:3d:9a:b3:2d:5c:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:5A:AE:1B:58:C9:66:25:93:E7:0E:57:33:F0:EA:B4:77:AA:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:15:e3:11:08:29:c9:e2:f0:f3:88:87:30:bb:98:c3:f3:
         c5:ca:c1:14:fe:33:7b:13:93:99:06:83:90:a1:dd:d9:d1:dd:
         60:d8:61:3e:ce:31:76:bb:91:8d:5e:61:06:2b:bb:bd:0d:46:
         1a:d7:9e:67:bf:1c:a2:fa:e4:a9:7a:8a:a4:71:7e:fd:75:8f:
         ab:f1:45:83:5f:3b:5c:76:7c:78:fd:d9:73:5a:f3:46:b8:2a:
         59:04:cc:30:bc:c2:7d:51:4a:17:0b:a4:1a:fb:1e:44:2d:a8:
         e3:6f:68:a2:ac:4f:c9:9f:ee:c7:62:cc:ec:04:57:ed:cd:4e:
         1f:27:ea:c8:99:b0:9a:7e:43:78:30:10:7d:4a:29:2d:fd:b4:
         ec:2a:03:8d:10:1d:87:07:73:ac:00:26:60:38:5a:3c:03:22:
         b1:a1:8b:5e:5e:89:b7:9c:8b:3d:9b:27:0e:64:59:02:01:e3:
         07:48:1e:d3:92:bf:95:bd:13:67:96:ff:97:70:b5:50:ca:16:
         8a:06:01:ec:c2:93:e7:10:be:00:91:e8:6b:16:31:52:91:27:
         05:68:e3:77:cc:6e:a9:b2:58:3c:b7:2a:69:59:0e:30:93:1c:
         59:ca:95:82:48:18:62:6d:9f:8f:dd:75:d9:0c:41:59:17:5f:
         fa:68:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:21:57 2024 by rpki-client on console-ams.rpki-client.org