Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa
File:                     3305d876-f28d-36d4-a431-98ba06f7b31e.roa (raw, json)
Hash identifier:          FtR8T1C1/LFmnvuwxUXxfiHrNxFHwHe5wBF2qUqpo4A=
Subject key identifier:   60:3D:4B:54:46:8E:69:F2:89:6C:DD:8D:AB:55:27:C4:6D:84:2B:A5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285844E93A93A22B420FFF1650F680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa
Signing time:             Fri 16 Feb 2024 14:00:29 +0000
ROA not before:           Fri 16 Feb 2024 14:00:29 +0000
ROA not after:            Thu 16 May 2024 13:00:29 +0000
asID:                     396982
IP address blocks:        208.81.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:3a:93:a2:2b:42:0f:ff:16:50:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 16 14:00:29 2024 GMT
            Not After : May 16 13:00:29 2024 GMT
        Subject: CN=e39a76e6-efd6-49e5-b428-dabaaa5fae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:01:79:4b:0b:24:3a:b8:78:12:e3:a0:0a:
                    15:13:af:94:c2:b3:34:ce:a7:cd:67:83:3a:14:d0:
                    e8:24:ea:a7:e6:a7:19:ef:05:08:39:97:e1:22:72:
                    fe:0e:d0:a9:89:d1:c4:4f:bd:c4:db:84:3d:8c:9f:
                    b6:dd:13:76:5e:ee:2f:88:60:5e:74:33:44:b3:97:
                    fa:5c:ce:06:57:9a:84:a5:ce:e7:89:6d:f6:b1:68:
                    c0:1a:12:9b:3f:97:ba:fc:c1:90:f3:2f:ae:42:f4:
                    ec:66:ca:99:d5:ec:d5:c4:3a:95:c9:0b:4d:2a:43:
                    cf:51:ee:1f:26:80:53:ed:a1:c1:8c:76:41:2c:cb:
                    a6:44:fd:ff:b2:b7:64:34:44:6e:ec:eb:0e:52:40:
                    72:19:6f:f4:a2:51:c7:41:62:14:d0:d4:7b:4a:7c:
                    c6:0a:87:8b:3a:08:34:00:1a:d1:dd:43:2d:c9:fa:
                    14:04:4f:51:45:a0:b8:ed:80:2a:50:2b:44:5b:28:
                    75:8e:10:86:1e:67:e5:33:52:03:ff:61:8b:2e:d8:
                    cf:97:0e:bf:1f:d5:33:05:e5:37:f5:1e:de:88:59:
                    41:00:69:a5:2c:a3:71:21:c0:f5:60:47:42:5d:b7:
                    b2:1a:71:06:8b:90:23:4f:e6:8a:6c:39:73:92:2b:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:4B:54:46:8E:69:F2:89:6C:DD:8D:AB:55:27:C4:6D:84:2B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:b8:f5:ad:dd:a5:c4:e4:b4:b4:c8:f2:a7:be:82:56:52:
         e7:7e:83:d9:f5:a6:90:98:08:44:a4:a1:3c:b0:49:2f:a9:a9:
         46:19:99:8e:73:b5:2d:e4:7d:47:35:b3:6f:e7:93:03:f5:ef:
         7e:15:1e:bf:a3:c2:14:cf:54:dc:16:7e:0f:6f:e4:64:3a:41:
         93:6e:3f:6a:6a:72:46:2a:23:7e:a2:d2:56:39:19:19:a7:af:
         7e:03:7c:db:fc:47:8f:b9:1b:9e:76:7f:b6:a5:39:9e:d1:3e:
         7d:45:df:5f:21:94:1e:95:57:6a:e1:8e:7b:87:76:a0:50:40:
         02:42:b7:be:10:ca:64:e7:34:76:34:65:d1:6b:57:ce:66:09:
         eb:bf:16:f2:d8:62:08:09:fc:2b:34:6a:1a:cf:a2:2c:a1:ac:
         96:0d:37:e4:67:1d:06:2c:cc:ac:65:de:8d:25:30:75:99:da:
         2c:86:b6:0d:4e:3d:d3:ae:ae:19:38:e6:2c:7c:0a:4a:79:1b:
         44:4e:74:bd:48:73:4f:5f:13:22:1e:38:96:dc:e5:35:97:96:
         81:a5:f1:1b:14:fa:c1:94:0b:2c:e6:39:d3:a3:cb:1e:7b:4d:
         7e:8b:0b:fb:49:b6:f1:b1:3c:ef:6d:14:08:e3:bb:ad:f2:22:
         bc:f1:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:06:36 2024 by rpki-client on console-fra.rpki-client.org