Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa
File:                     675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa (raw, json)
Hash identifier:          ouLgEP0FXZYf/34JUknZSb5mgT9ExkR87piDvcp75xc=
Subject key identifier:   01:05:73:62:B2:99:C9:EB:94:FC:C6:3D:9A:A3:D0:94:FA:78:C1:99
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454623D0205F0CE538C9C34000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa
Signing time:             Wed 20 Mar 2024 20:44:49 +0000
ROA not before:           Wed 20 Mar 2024 20:44:49 +0000
ROA not after:            Tue 18 Jun 2024 20:44:49 +0000
asID:                     15169
IP address blocks:        216.58.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:d0:20:5f:0c:e5:38:c9:c3:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:44:49 2024 GMT
            Not After : Jun 18 20:44:49 2024 GMT
        Subject: CN=05ce1988-e626-4605-964f-7cfc17e6984e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:fa:91:e0:ab:fd:03:f7:f7:b7:55:fc:92:
                    d5:04:7b:c8:bc:a4:cb:c8:d9:63:08:2b:f4:d3:62:
                    6e:a8:97:f6:48:9f:83:5f:1b:64:e3:7f:44:ea:b4:
                    0b:7d:72:ce:81:bb:83:f0:22:42:b3:25:97:31:c2:
                    7e:8c:af:ae:6e:ef:d3:8d:48:14:7f:19:ef:24:5c:
                    7f:1e:04:f5:cf:cc:94:02:f6:64:fd:53:ca:07:e4:
                    96:98:0d:27:65:7a:e9:99:a1:a9:73:d8:7e:71:82:
                    af:34:ac:66:21:5e:aa:ec:d0:d4:92:b2:cd:8e:31:
                    cc:ec:14:d8:ae:a1:97:21:be:80:3b:10:80:57:58:
                    79:72:d1:40:9c:cc:d6:e9:12:1f:4c:05:52:bc:63:
                    f7:64:f2:39:9e:05:12:f5:1a:7f:2d:4a:2a:00:9c:
                    6e:9d:d1:7e:0b:67:2d:df:7f:76:dd:e9:4d:4a:62:
                    38:68:5f:8d:5f:cd:97:60:b4:9f:0a:30:7c:26:39:
                    bf:91:70:74:ce:bd:15:63:63:1c:b8:fd:f2:f5:4b:
                    17:7b:e6:88:d4:a0:c3:58:55:db:b5:f6:4d:4c:4e:
                    10:93:16:45:8d:65:c1:bb:c3:5c:84:39:c2:ae:4c:
                    da:2f:93:67:f6:1f:5e:6b:e9:45:f4:55:18:70:0e:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:73:62:B2:99:C9:EB:94:FC:C6:3D:9A:A3:D0:94:FA:78:C1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:d2:f6:13:37:f1:33:00:85:f4:3a:24:e2:a0:2a:d2:b9:
         1c:c4:90:6d:01:6f:c3:9c:89:ab:98:0e:84:91:fb:56:ff:af:
         04:d2:01:24:9d:13:63:68:ea:a8:98:25:47:66:0a:bc:84:3b:
         18:e5:f5:c9:e8:cc:6b:7e:1a:13:ae:a8:17:0c:f8:1d:54:67:
         6c:12:67:17:3e:2d:44:9a:e8:8d:52:27:02:83:13:a4:31:5c:
         30:3a:a8:70:d6:a7:89:f9:b7:e7:28:00:43:e7:1d:62:d8:3b:
         be:c0:4e:37:30:f5:2b:77:7f:c8:f2:82:b6:26:4b:8c:a3:07:
         ff:ad:9a:7c:03:7a:60:c1:29:5a:15:0d:75:4e:8a:be:db:82:
         73:be:3c:78:0e:84:b5:61:80:f3:48:be:07:9d:19:09:7e:ee:
         29:48:2b:a0:e2:49:d7:0d:74:3a:7e:8b:f8:ea:62:ed:a4:68:
         5c:69:ea:71:fc:31:de:02:ea:15:c4:dc:e9:62:a4:40:4d:cc:
         36:db:ad:8b:ee:3a:4d:dc:90:9a:a6:08:86:f2:b6:f3:de:78:
         6c:80:21:77:2b:9e:31:e6:e0:e3:6d:de:0a:d0:3f:fb:78:41:
         68:7e:92:3f:8f:0c:3d:d8:ed:fb:cb:f2:55:5f:a3:18:b4:6b:
         1f:71:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:17:03 2024 by rpki-client on console-fra.rpki-client.org