Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/bb433fa6-16ac-34b4-87a1-4e0a8e4f1b8d.roa
File:                     bb433fa6-16ac-34b4-87a1-4e0a8e4f1b8d.roa (raw, json)
Hash identifier:          PlbZjpvgrlFq9RL6cwr2q8MQa5hcOKP9knsuU8UvyBs=
Subject key identifier:   47:87:B9:96:97:83:28:BD:E6:88:EA:52:68:1D:A0:F4:9C:7E:B3:28
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F43285844F46556C7611584BC6728D480
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/bb433fa6-16ac-34b4-87a1-4e0a8e4f1b8d.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     54203
IP address blocks:        199.33.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:56:c7:61:15:84:bc:67:28:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=04805625-6e5f-4fcc-83bd-69a40a5470ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:9c:36:0b:63:19:ec:0e:54:0d:be:0c:e0:
                    59:0b:b3:40:74:b3:39:09:9b:0a:f0:e7:be:ae:89:
                    92:e0:81:44:dc:93:d9:26:e2:46:47:61:cf:6d:f4:
                    78:78:b3:1f:70:95:c9:7b:5a:df:b2:a2:e6:8c:35:
                    3c:15:c4:11:59:a6:db:6d:a4:dd:16:1a:d6:01:8d:
                    34:97:1b:ad:35:38:f9:94:43:61:d6:e8:8f:31:8c:
                    2f:4a:2e:6e:72:07:8e:39:3d:34:12:19:3f:a1:6c:
                    28:00:1b:ff:46:03:64:29:76:60:ee:75:53:e3:b7:
                    2c:80:f6:1a:35:3e:9d:a1:4d:5e:aa:01:a1:0a:c4:
                    83:45:fe:7c:00:e3:87:5b:42:e1:16:0b:df:b4:d3:
                    d1:31:5d:69:ce:85:e4:26:ec:d7:d7:ce:b7:f6:66:
                    7f:ea:b9:b7:4d:c6:79:61:b9:34:6f:d4:63:59:3a:
                    d9:48:25:d5:9a:e3:67:80:82:09:cd:3f:f3:b9:9c:
                    e1:ad:91:9a:c7:e2:2f:5f:96:3f:a6:70:f5:32:34:
                    93:a4:3f:34:cb:19:96:b7:d8:28:9c:4a:2c:d2:0b:
                    d4:72:b2:67:9d:bb:23:8b:56:94:1c:70:17:8f:22:
                    13:63:55:8b:73:e8:f6:64:bd:a0:e0:87:4a:fc:01:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:B9:96:97:83:28:BD:E6:88:EA:52:68:1D:A0:F4:9C:7E:B3:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/bb433fa6-16ac-34b4-87a1-4e0a8e4f1b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:7b:a2:3b:82:6d:3a:de:5f:08:52:37:1c:4c:e3:a4:5c:
         ff:5f:8f:ca:f2:b6:34:66:38:aa:19:ea:27:14:b8:32:fe:52:
         c1:5d:f5:ff:98:cb:b6:fa:7a:35:0a:51:7b:93:ec:f8:be:65:
         5f:21:e8:f1:a1:47:e1:59:be:ba:66:a7:b6:78:d6:56:46:85:
         d3:7c:53:5f:cf:3e:34:63:e7:fa:4c:44:80:b4:f9:9a:af:25:
         27:ca:bc:cf:c8:43:0d:1b:d3:4d:0f:67:df:46:24:7f:af:7d:
         d9:ed:aa:44:1e:59:f0:a8:de:f3:30:29:bf:44:1e:ab:6e:a8:
         9a:6a:58:e7:55:ad:ac:7b:5d:38:1a:e4:07:4d:c1:20:a8:7f:
         3a:65:a8:49:23:ae:0d:e5:33:4c:ee:d7:9b:79:d3:41:1b:0a:
         36:af:ae:50:99:00:cb:e9:e4:6e:27:b7:18:2c:cf:c3:75:77:
         c8:72:8e:75:5a:1f:a9:be:d6:14:3d:18:6b:5b:59:83:6f:57:
         a1:a1:c0:6a:13:74:80:28:f2:52:00:ef:e2:a3:3d:41:10:51:
         f4:bb:94:e2:9d:a9:55:3a:c3:b4:23:4a:87:41:f4:99:0c:6a:
         44:6a:da:89:89:e1:e8:b6:2c:40:23:3c:8b:20:db:dc:4b:dd:
         31:29:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:10:13 2024 by rpki-client on console-ams.rpki-client.org