Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa
File:                     af0f2f5c-7f07-33be-bd01-a7960233392f.roa (raw, json)
Hash identifier:          PRLs394nkcTHwE11CB1kW+gbg/sIauM6t5txO7lop6U=
Subject key identifier:   9E:2D:47:2D:37:04:1B:C1:51:7A:4B:AE:D9:D3:1C:5F:A8:45:CE:1A
Certificate issuer:       /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
Certificate serial:       010D0C9F43285845C5A8E72B726D4DCE8B42B940
Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     36329
IP address blocks:        208.71.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e7:2b:72:6d:4d:ce:8b:42:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=d9b3a5ef-0169-4553-8096-c42f99d8496b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:75:60:44:07:72:99:78:f2:d3:51:bc:cf:
                    2b:3d:96:c4:95:d7:d3:12:e1:9e:4c:b4:5d:7c:39:
                    69:b9:df:2a:3b:1b:0e:6a:ee:06:0b:6a:58:95:f6:
                    f7:d3:76:61:e6:c5:96:3c:69:2a:b1:e3:f0:b9:4b:
                    89:9b:4b:5d:54:a1:de:5f:9d:a4:91:29:52:4e:d0:
                    5b:f6:e6:c3:26:ea:ec:aa:73:87:91:b1:5f:cd:aa:
                    c0:e1:4d:63:e2:c7:c0:09:c8:88:18:a6:66:2e:fe:
                    5a:4b:ee:2a:3b:4c:70:a6:b1:db:92:bf:23:47:af:
                    fb:d5:3b:9c:3c:63:ee:26:13:7a:38:8f:00:3b:95:
                    85:7c:40:54:a5:ef:1d:2c:88:06:00:13:da:21:c1:
                    1a:f1:6c:07:49:2d:b4:3b:02:9b:43:f7:f7:24:f3:
                    fd:46:57:d8:f1:25:73:06:19:55:ec:8d:25:e7:6b:
                    e1:21:4a:e6:4b:21:72:ed:b8:d1:f3:7b:95:a7:b8:
                    ff:b7:b8:56:8d:ba:f6:4a:ab:22:c2:4e:8b:aa:c3:
                    42:95:ad:25:14:f9:d6:ed:fa:75:58:71:ae:37:55:
                    e1:ba:10:de:10:c4:f2:8e:ca:30:8a:75:57:c9:49:
                    ae:d5:12:f4:04:70:a8:af:f8:c1:12:f7:27:f1:8f:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:47:2D:37:04:1B:C1:51:7A:4B:AE:D9:D3:1C:5F:A8:45:CE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl

            X509v3 Authority Key Identifier:
                keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:e3:e4:9d:d0:ad:27:df:c1:15:bd:e6:76:28:6d:ac:aa:
         b5:1f:be:90:63:ef:ae:67:bd:9d:33:74:df:4d:3f:9e:e2:ed:
         75:fc:12:1d:65:3e:c0:e1:67:4d:f1:5c:0f:35:7d:ab:af:e9:
         16:93:3e:cf:08:25:61:6f:c5:34:ff:1c:3d:9d:a9:b8:fd:df:
         3f:1d:9e:62:53:60:df:27:99:9d:10:81:9e:b3:1f:46:48:12:
         d5:f7:9b:7c:f6:0a:12:64:f8:7f:c0:2b:2b:84:e7:74:72:5c:
         b1:f3:bb:1e:1d:da:ea:00:65:e3:6d:4a:d7:bf:3a:d5:81:fd:
         1d:db:26:c9:d5:35:50:9f:1e:63:fb:86:e7:56:6e:03:6d:31:
         f9:9f:7b:4f:79:65:d0:f3:e4:e2:55:a4:cf:19:c2:c2:fa:88:
         a8:c6:9f:69:be:0c:41:f9:c8:ef:16:23:91:46:9b:7c:7e:63:
         4e:64:6a:10:b6:d3:f5:55:e4:a4:ae:8d:08:4e:a8:3c:0a:a1:
         23:22:22:95:37:25:45:6a:4c:28:a0:37:c9:b8:fa:f4:bf:34:
         d6:31:48:ab:20:49:fb:95:9f:8d:8c:73:56:0c:ed:66:4c:c0:
         88:d6:03:77:4d:81:4a:0d:73:80:8b:6a:72:27:c7:c1:0d:42:
         a1:c5:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org