Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
File:                     8a1ae401-360b-32d6-aa65-fa628237cb11.roa (raw, json)
Hash identifier:          fVupNbPIPuQVlmDZhRwuvL8ARL42yJsDjC89Uu0yAtw=
Subject key identifier:   1E:BE:B6:69:62:8C:84:FF:70:D9:E4:1F:EC:40:23:17:AE:D5:F4:77
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858457A488F792998A8C849CA5540
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     22438
IP address blocks:        208.83.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8f:79:29:98:a8:c8:49:ca:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=1a417ea9-0419-4c58-83db-5915e74e277f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:7f:6a:9e:db:49:1f:4c:d6:93:2f:8e:78:
                    cc:f8:c7:fc:01:b1:86:1a:fa:fa:c4:c1:10:ea:33:
                    64:f0:b6:23:07:c2:ad:eb:b5:0f:22:8a:56:c3:a6:
                    46:a2:f3:f1:7a:85:81:2e:73:56:dd:87:0b:dd:dc:
                    ba:ec:21:ca:ab:0b:7d:1d:f1:bf:b5:c8:cd:6a:3b:
                    d1:f5:67:1f:e9:71:eb:2c:15:92:f1:8d:1e:08:5e:
                    f1:aa:ae:5f:c6:c1:47:ce:00:c9:35:36:e5:7b:c6:
                    21:80:40:79:12:22:37:9f:21:61:e3:59:8c:6f:f2:
                    93:84:76:c2:e7:bc:d2:78:a7:bc:44:3f:25:32:ea:
                    a1:0d:e2:bf:9f:1a:46:84:0b:55:de:9d:0a:f8:11:
                    93:a3:a1:9e:5b:bc:a9:ba:5a:be:b2:b5:ff:52:e1:
                    83:ed:98:56:7e:2c:94:44:e2:01:17:81:21:f8:73:
                    b3:ad:87:04:36:83:4e:73:6d:8c:89:04:02:da:a4:
                    bd:e0:a0:45:88:80:b1:bf:9b:14:09:5b:e7:ac:69:
                    f8:a3:7a:2b:95:88:ca:e9:0a:89:47:76:59:6b:f2:
                    5d:a4:af:1b:10:de:b6:0b:81:5a:7e:2f:7a:c5:a7:
                    ae:3d:5f:b3:9e:58:21:c4:46:f5:07:6b:4f:03:bc:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BE:B6:69:62:8C:84:FF:70:D9:E4:1F:EC:40:23:17:AE:D5:F4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:07:01:b8:52:0f:ff:59:9b:a4:a0:1d:ea:ed:1a:7c:ee:
         8c:79:7e:9c:5f:17:f2:ec:4b:c2:34:1a:55:bc:9a:c5:39:f3:
         3a:e6:2a:1c:aa:6c:53:cf:72:e6:bf:6f:c1:7b:c6:f1:1d:bb:
         e7:aa:42:f5:0b:77:8a:b4:1d:e2:54:88:47:bb:75:e8:22:fa:
         3e:3e:8f:44:7b:9f:0f:13:34:e6:49:c9:2a:ee:93:86:7b:da:
         94:dd:fa:b5:89:21:e5:df:46:7f:19:6f:78:06:92:13:05:c7:
         5f:e1:85:fd:d0:66:7c:ad:55:97:52:fa:2f:af:5b:f1:91:92:
         5f:3d:e7:65:e4:22:3f:31:c5:57:a5:c3:24:44:fe:2a:d2:4f:
         dd:e6:f9:68:94:ef:ac:2b:4d:9c:eb:74:23:85:82:d4:5e:1c:
         dd:ff:ac:ec:fe:a3:01:50:f0:f8:c4:20:30:db:57:e1:0f:2f:
         db:18:70:6d:aa:38:8b:51:ae:a3:79:85:13:27:1d:0c:11:c5:
         03:c5:6f:cf:6d:c4:ae:45:46:79:73:00:9e:61:68:b8:83:13:
         1b:5a:67:6e:a3:00:08:cc:58:17:01:9f:08:d7:78:1a:f7:90:
         9a:18:7b:b2:6e:bb:82:ea:a2:91:2a:98:96:9d:78:c9:30:34:
         cb:8b:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:11 2024 by rpki-client on console-ams.rpki-client.org