Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/95210e97-074a-3455-b808-83861fa00e8e.roa
File:                     95210e97-074a-3455-b808-83861fa00e8e.roa (raw, json)
Hash identifier:          35vpE7xRcI938K8goFm63vo7idUCleQKBWb8dHA0OuI=
Subject key identifier:   1E:DF:A1:AC:5B:DC:F0:B4:F6:DC:A5:3E:33:D4:D7:D9:04:F6:AA:B9
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F43285844DF4465E6ED45D8DB3F67D530
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/95210e97-074a-3455-b808-83861fa00e8e.roa
Signing time:             Tue 13 Feb 2024 00:22:13 +0000
ROA not before:           Tue 13 Feb 2024 00:22:13 +0000
ROA not after:            Sun 12 May 2024 23:22:13 +0000
asID:                     834
IP address blocks:        206.251.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:44:65:e6:ed:45:d8:db:3f:67:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Feb 13 00:22:13 2024 GMT
            Not After : May 12 23:22:13 2024 GMT
        Subject: CN=0a5a224d-b598-4ff7-857e-40745a5b1d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:ca:5f:ff:14:02:a0:d4:54:18:67:13:b6:
                    a7:72:34:aa:6b:e4:4b:e1:dd:e6:91:a7:e1:b9:75:
                    bc:95:d1:f7:f2:51:e3:99:e5:84:51:a8:56:c1:40:
                    b4:5c:a2:e8:02:ce:5d:72:a5:f8:f1:e7:36:15:f4:
                    7c:6e:7f:1d:2e:fc:7e:f1:80:b2:b3:89:e3:52:c8:
                    b4:55:95:74:8f:05:59:83:2f:06:01:3d:7d:bf:7e:
                    d4:8b:23:98:92:9d:da:68:52:16:8b:d2:b0:a6:65:
                    da:be:3a:bc:a4:b5:67:c5:13:9b:65:05:95:84:09:
                    92:af:ea:38:f9:21:a7:bb:1c:33:6b:cc:4a:02:dd:
                    3f:96:af:4b:2c:69:72:ea:0d:15:f3:d1:cd:6f:37:
                    5b:90:22:b4:43:29:fa:c7:cd:13:32:b0:d9:c0:bc:
                    7f:eb:11:d2:0e:55:d1:9d:79:cb:9b:2d:18:cb:96:
                    0d:6f:f4:62:11:74:dd:8f:9e:6c:d3:99:df:36:46:
                    4a:30:55:65:ab:64:fb:5c:19:a4:23:24:ba:3b:64:
                    bf:80:bf:f4:cb:72:8b:09:64:03:dd:cf:4e:9f:ba:
                    73:ed:c8:4c:62:1f:1c:a8:f4:f7:4d:cb:73:82:97:
                    a5:cf:65:d2:e6:44:b3:02:0b:4e:ee:4c:98:92:31:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DF:A1:AC:5B:DC:F0:B4:F6:DC:A5:3E:33:D4:D7:D9:04:F6:AA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/95210e97-074a-3455-b808-83861fa00e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:ca:64:07:64:c8:b2:88:6b:c6:f8:5c:af:d2:bc:01:27:
         7d:34:35:e8:b6:a6:98:fa:d9:bc:af:b2:47:f5:41:92:8a:c4:
         d4:a7:55:88:d3:3c:db:3a:a2:31:0d:11:a4:26:0d:14:48:4e:
         d0:ae:2a:3d:1f:f9:78:c4:9a:60:8d:89:f9:17:4b:37:39:8d:
         04:57:a9:57:12:b5:15:16:77:b7:82:61:d4:d6:44:bb:1f:e9:
         26:dd:60:88:0a:7a:ea:5c:5e:58:ef:84:c5:a0:a5:38:9d:0d:
         c3:ed:b8:bf:07:d1:59:5c:ec:ea:ce:76:37:bf:cb:62:83:fe:
         86:75:34:82:99:ed:65:79:8a:e6:f9:17:13:a5:45:d7:c4:e0:
         8a:62:1b:b1:a1:6e:12:c5:ad:9b:96:39:77:8e:45:77:ee:49:
         16:d8:1d:ea:02:23:a1:29:1a:c6:51:cb:bf:a8:bc:ad:30:32:
         f8:9f:da:64:99:2a:08:c6:74:c7:2b:c0:22:ff:39:eb:af:a7:
         63:ca:bb:56:0b:ca:95:d9:fc:ec:c9:ef:9e:ff:cb:06:af:57:
         1c:3b:d4:b1:ff:01:fe:a3:00:bc:e2:a6:54:20:61:ed:85:fd:
         a4:99:9b:b3:83:f4:dc:bc:e3:1e:44:c6:22:5b:e3:74:34:51:
         bf:9e:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:48 2024 by rpki-client on console-fra.rpki-client.org