Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/e12ccc84-532c-3776-a16b-50b2503e3495.roa
File:                     e12ccc84-532c-3776-a16b-50b2503e3495.roa (raw, json)
Hash identifier:          OETizv+LkfKTGcZFM1cgn9ki9r9BZfMbY3Apc7wKmVo=
Subject key identifier:   8A:04:E4:D2:72:F1:85:92:4B:B1:41:62:83:01:6C:74:58:14:AF:EB
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F43285845A9BE0E57696456CA21D92C80
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/e12ccc84-532c-3776-a16b-50b2503e3495.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        216.247.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0e:57:69:64:56:ca:21:d9:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=dafc98b6-ed3e-4400-9c97-cc1901c2e99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:39:87:29:21:f7:8e:7c:0a:0c:7b:59:e6:
                    bb:87:25:8d:72:d0:a6:05:b0:17:d6:14:c7:42:31:
                    f8:1d:de:7d:44:b5:73:38:1e:e6:50:71:c4:51:db:
                    67:e2:c3:62:ab:ff:c1:86:a4:90:93:5c:51:dc:33:
                    b5:2c:0d:c7:98:1a:46:3e:d0:66:9e:69:75:61:15:
                    c5:a5:48:be:cd:80:c6:cd:a0:50:13:7f:ff:32:cf:
                    1c:a8:36:d8:37:cb:89:b9:6c:37:04:5c:8d:a2:57:
                    67:49:02:da:c8:0a:f1:b2:25:8c:dd:90:3c:a9:d1:
                    c8:fd:7b:71:63:d3:6d:93:2c:a4:e7:19:60:a8:bc:
                    74:3d:50:ef:11:57:a3:fd:9a:2c:fc:70:f7:35:9b:
                    b2:fb:7e:59:d2:a0:45:4b:87:4e:be:44:78:a6:56:
                    35:e7:bc:35:17:7a:81:56:dd:7a:d4:d1:78:a9:8e:
                    e0:69:f7:f3:0f:b1:04:05:7e:57:34:99:88:d0:17:
                    e4:08:d0:d1:e3:f9:39:80:31:01:d0:72:3a:80:21:
                    8d:84:0f:b8:26:2a:5c:39:e3:0b:91:41:33:e9:3f:
                    5c:dc:bc:d5:e9:13:7a:a3:0d:26:b4:b8:b9:23:c8:
                    23:27:2f:c4:7c:a3:bf:d3:b8:49:4c:2f:d6:bf:00:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:E4:D2:72:F1:85:92:4B:B1:41:62:83:01:6C:74:58:14:AF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/e12ccc84-532c-3776-a16b-50b2503e3495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:6e:1b:f2:b8:f2:e8:cd:72:5d:c9:0f:48:10:35:63:e9:
         e5:6a:de:5c:3a:b4:01:44:1a:78:6e:a7:5d:d8:7b:9b:6e:ad:
         ab:7d:26:db:48:c0:a6:04:68:1d:8a:f8:50:99:33:81:85:26:
         ae:22:66:28:bc:44:e1:c8:29:38:7a:e8:69:82:45:40:48:19:
         b6:e5:6e:b9:df:0b:88:12:ce:02:a8:74:f1:0b:37:a9:91:a2:
         32:b2:19:03:8f:70:a6:ca:e5:b1:96:05:7f:29:1d:33:e1:f8:
         ad:23:67:40:37:0e:b7:9c:01:19:49:82:28:eb:e0:d2:2f:95:
         e5:a6:8b:ce:1e:51:f8:bd:6d:6f:5e:bc:0c:ce:a9:0e:55:5e:
         82:4f:d0:14:77:c8:a7:2d:ed:9c:c8:8f:90:c8:bf:8b:20:97:
         54:24:12:a3:13:b7:ed:a7:4f:d2:a3:fa:e1:98:57:30:62:22:
         b5:2b:7c:a5:19:39:0e:c6:b1:21:97:ca:36:0d:7f:d2:ee:47:
         0d:93:ff:d1:79:91:53:b8:49:d7:da:e6:40:40:ff:02:52:e6:
         5d:3d:ad:ee:0c:c8:f8:65:ec:0e:0c:0a:d6:4a:79:cd:b4:ba:
         da:53:8d:1f:60:31:68:8c:f1:fa:c7:13:fa:d6:b4:21:a5:89:
         4c:84:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:13 2024 by rpki-client on console-fra.rpki-client.org