Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa
File:                     db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa (raw, json)
Hash identifier:          lk4QFcwHy+BWr+X8F7dODGRH/sYA1Ds9iIgm8s06Du8=
Subject key identifier:   D3:9D:41:8D:18:27:BB:63:35:74:A2:00:AF:1C:71:64:31:D0:86:F9
Certificate issuer:       /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial:       010D0C9F4328584510502FF7966159C91704C600
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     13411
IP address blocks:        206.168.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2f:f7:96:61:59:c9:17:04:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=1c70239c-1b2f-45bd-b71b-57df984d1d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:3b:80:ba:90:58:77:bf:ab:84:d5:2c:91:
                    97:cc:ab:60:78:46:01:a0:17:10:d6:72:d9:9d:01:
                    2b:04:69:0d:5a:a0:80:87:f4:d5:d8:4c:ab:35:68:
                    9f:b0:03:f2:10:63:9b:1f:90:cf:4a:07:b3:8f:4d:
                    3e:f3:f6:97:f6:4e:40:5a:e1:9b:7a:62:8e:a0:8e:
                    dd:20:6e:9c:4f:28:00:40:40:26:fc:a9:56:08:b4:
                    cb:9e:a4:5b:e2:79:c8:7c:32:5b:f7:e4:2c:78:85:
                    61:a2:f9:23:95:8a:2b:bd:34:17:86:40:f1:2f:7b:
                    8a:2b:af:c0:40:06:5c:7e:52:33:0a:fb:f4:03:1b:
                    67:11:d2:74:39:b7:22:35:16:48:42:e2:07:fb:81:
                    bf:46:9d:53:87:7e:44:7a:f0:92:9f:c8:bd:19:f2:
                    e2:6c:e2:89:f6:cb:66:3b:fc:a9:77:36:70:14:49:
                    28:b6:de:8d:ba:05:b4:c1:20:32:a2:2e:45:42:e1:
                    41:5e:7f:aa:1e:08:bd:6e:a2:a7:ea:8f:66:af:22:
                    bc:81:fe:67:06:31:a6:5e:f5:fd:f5:5e:69:84:02:
                    02:47:f7:29:8c:cf:db:f1:ab:ea:b3:07:33:2d:5c:
                    77:cf:b1:79:97:e2:cd:2b:1d:cd:fd:10:af:4c:cd:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9D:41:8D:18:27:BB:63:35:74:A2:00:AF:1C:71:64:31:D0:86:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:aa:a0:90:3c:de:e4:8b:93:ae:ac:03:fa:90:94:7d:65:
         bc:bd:cf:51:4b:f5:10:0e:fd:8f:69:b8:f8:9f:a1:82:0c:34:
         30:4a:03:72:99:37:c0:47:23:49:c0:f9:3b:bd:47:10:73:7a:
         a9:af:50:df:c0:58:b0:6b:13:4d:21:de:2d:12:48:54:47:4d:
         92:da:d1:5e:3d:79:0c:1d:12:88:15:16:ad:cf:03:d6:01:7b:
         0a:e1:ac:3a:d3:3d:ab:74:6b:0b:e4:8c:2b:f2:b7:65:d1:c2:
         85:87:b4:4f:66:a3:79:79:94:0c:ea:da:23:32:57:31:1d:55:
         cd:4d:62:8b:bd:4a:68:e5:e8:d8:da:e8:da:6e:be:eb:82:09:
         2d:52:0e:b8:36:4f:ff:fb:c6:d0:07:26:70:c5:d3:cf:16:9d:
         88:ba:4e:29:22:87:d7:40:68:ce:57:72:54:67:b5:82:81:49:
         a7:38:f5:df:5c:8e:69:46:2b:e2:11:1c:f8:70:42:66:73:9f:
         8e:35:68:b6:29:ec:f9:f5:d0:9b:8c:21:5a:ac:9a:99:d0:a8:
         4a:0b:fe:ba:4a:15:d5:11:c9:40:3c:4a:36:29:de:a7:5f:03:
         9d:61:9b:18:7f:db:eb:a2:2f:53:2c:16:2b:3d:77:39:4d:c6:
         67:8a:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org