Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa
File:                     80be0def-4049-3ae5-bb3c-3633976d709e.roa (raw, json)
Hash identifier:          7HNkGGx/YP0t/7gBZBY7YbggveLJkRY2UdM1CllsdDk=
Subject key identifier:   D5:E2:22:C7:D8:28:58:2E:85:FD:CF:7D:AF:B4:0B:94:57:BB:EE:59
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F432858453E429FE44EEBF42E369C1EC0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     396356
IP address blocks:        216.105.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:9f:e4:4e:eb:f4:2e:36:9c:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=e2279439-7cbc-4225-93bd-729351666076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:59:d2:41:d5:af:2b:9b:d0:15:82:ab:6f:
                    8f:6c:3f:5c:ab:6e:16:d8:e9:e0:78:54:aa:7c:8a:
                    9a:e3:01:35:7a:c7:3d:59:7f:f0:84:c8:f6:3a:08:
                    7f:ea:bf:ac:51:89:a9:f6:e6:28:91:f7:83:b6:c0:
                    fa:0f:40:c1:19:61:30:68:1d:cc:fc:a3:b4:b7:a7:
                    51:f7:f4:bd:e9:e5:8d:ad:54:35:c1:3b:b2:cb:3b:
                    bd:89:9b:b4:8b:4b:7a:f7:ec:88:b4:9c:20:be:f7:
                    38:50:54:0d:f9:01:20:41:c9:53:20:4d:7a:2e:05:
                    b3:cb:77:b8:be:1d:89:59:18:82:6e:33:e9:23:58:
                    11:95:23:19:32:cb:0f:fe:fb:14:7c:bd:75:90:ef:
                    8c:a5:ce:61:c3:06:64:eb:d0:ce:f7:8a:68:b5:63:
                    d9:83:80:f7:be:4c:26:98:9f:f2:c7:cc:a7:13:48:
                    26:67:6e:51:e2:1f:a6:cb:e1:8b:69:46:5f:a8:fd:
                    a2:82:f0:e2:0a:a6:e4:30:68:41:53:0e:50:6b:bd:
                    5e:9b:55:32:54:09:6a:2f:3b:fe:62:49:27:2e:4d:
                    81:e0:7a:17:d7:1b:c7:73:0c:61:ca:44:90:98:e4:
                    1c:f9:b9:80:a8:9e:d3:2d:4f:05:85:18:b7:0a:55:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:22:C7:D8:28:58:2E:85:FD:CF:7D:AF:B4:0B:94:57:BB:EE:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:29:53:e4:d5:0d:0a:a0:13:73:27:fa:57:f1:60:bb:23:
         9c:ca:a6:51:87:06:fa:36:a9:07:b6:51:f1:31:27:7b:c9:57:
         53:be:68:d2:d7:56:f3:7b:89:f8:50:b8:dd:dd:3b:7b:b8:a4:
         ae:e2:b3:6d:b9:3d:1b:93:19:35:1b:68:06:7a:31:ce:af:46:
         c7:d9:4f:5e:89:af:ae:ca:42:73:7f:09:dc:84:e9:8c:99:b5:
         40:ad:82:5a:12:da:51:93:62:84:ea:f8:3a:9f:a1:6d:05:b6:
         b6:b6:7a:61:76:ab:13:f6:78:36:0c:01:1d:a0:e4:64:8f:ad:
         57:65:b4:f2:42:dc:ea:25:be:0a:31:0d:ae:bf:0a:bb:34:39:
         4a:b9:ad:37:5a:1c:8f:7d:81:de:0f:b0:68:68:88:2a:a8:58:
         cb:9e:4c:b0:26:66:ab:72:1a:3e:b4:b8:45:26:50:a0:15:b1:
         09:bb:61:b5:22:b2:5e:41:99:fc:70:ff:fd:78:41:52:ff:e6:
         c6:28:06:39:e7:72:f1:b2:25:7f:09:41:c5:2f:36:75:95:26:
         a7:d2:74:68:93:13:d0:e1:52:85:46:83:4c:d4:3b:bf:5e:8b:
         25:f6:79:dc:37:75:45:4a:0c:3e:4a:9f:d3:41:f6:d6:31:79:
         ed:0c:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:53 2024 by rpki-client on console-fra.rpki-client.org