Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/e6243a31-bf0f-3617-aaf7-fa14c60c26a5.roa
File:                     e6243a31-bf0f-3617-aaf7-fa14c60c26a5.roa (raw, json)
Hash identifier:          ykjT41JHDoy1KRaPdH+1/XcBFiJrLGz+pB6zuNjpLMk=
Subject key identifier:   81:F9:4E:EF:19:19:90:B6:1F:B7:5C:4D:7E:9C:E6:18:28:B8:06:2B
Certificate issuer:       /CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800
Certificate serial:       010D0C9F4328584589A31D6B4121BDBA701ADA00
Authority key identifier: 3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/e6243a31-bf0f-3617-aaf7-fa14c60c26a5.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     834
IP address blocks:        205.234.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1d:6b:41:21:bd:ba:70:1a:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ff5cf3-2331-43ed-a507-09a3f52b2800
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=b68bb477-9dcf-4db0-9359-b4eef178ac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:1d:04:a1:c1:b0:c8:30:aa:34:d3:a3:a3:
                    03:a5:a0:b0:78:7e:a5:25:bc:96:a6:8e:38:2c:60:
                    f5:8e:d0:a8:c4:7f:ac:55:f6:0d:e8:52:58:8c:97:
                    18:ab:00:2a:8a:21:5c:a9:d0:1e:73:14:2b:55:7c:
                    ab:d1:a2:62:7f:eb:39:bf:01:83:5e:6d:49:46:55:
                    2f:70:53:27:13:46:2f:61:47:dd:d9:fa:73:75:1e:
                    d3:0a:66:be:5b:db:41:86:1f:d3:7b:d2:3a:e1:df:
                    b8:9e:7d:a8:49:51:95:6a:c1:d9:c7:61:a7:54:f9:
                    53:e1:7d:69:e6:ca:d9:5f:a1:c7:ea:32:ad:79:32:
                    3e:92:bf:46:ca:75:1e:4e:49:b2:97:3a:5f:f8:61:
                    57:5e:17:34:88:f4:92:de:1f:85:c4:5b:ac:2a:6b:
                    48:88:33:38:9a:cf:55:09:e9:be:df:dc:40:13:31:
                    2c:f4:27:01:9a:36:95:31:e3:7c:40:e8:e8:81:3f:
                    d8:11:17:a7:81:47:2c:1e:56:39:e1:d5:88:31:8d:
                    ab:a4:c2:1a:cb:df:50:c8:d5:06:63:ec:c6:97:83:
                    18:e6:52:4f:d4:c3:22:4b:56:a2:e8:2b:65:c0:a6:
                    51:4a:0c:4b:39:65:b3:e8:cb:38:19:3b:9e:a9:a1:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:4E:EF:19:19:90:B6:1F:B7:5C:4D:7E:9C:E6:18:28:B8:06:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/e6243a31-bf0f-3617-aaf7-fa14c60c26a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800/f3ff5cf3-2331-43ed-a507-09a3f52b2800.crl

            X509v3 Authority Key Identifier:
                keyid:3D:B6:6D:21:39:F6:B3:5B:D4:E2:26:D3:00:5D:DE:8E:C9:BE:35:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f3ff5cf3-2331-43ed-a507-09a3f52b2800.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:35:d3:aa:22:50:2c:07:49:ea:75:a0:f9:50:b7:6c:83:
         3d:82:a1:15:7d:2e:24:ec:c6:d6:9b:c0:15:dc:60:31:d7:aa:
         54:1f:82:07:c9:5e:89:d9:06:52:e2:75:60:29:b0:5b:18:e3:
         a9:ab:c8:fe:56:fc:f9:85:c0:e1:dc:14:33:6f:1f:2d:0b:bb:
         91:43:19:c9:55:3b:3a:b0:8d:0d:36:f8:84:fe:9e:1b:57:34:
         d7:4d:5a:2b:3c:4d:f3:87:24:cc:bf:36:2a:14:92:8f:76:16:
         51:d2:a0:90:4b:ff:a9:7e:8c:4b:92:a0:ca:bf:88:4c:f2:55:
         f6:8e:99:df:4e:a4:a4:19:50:e3:bb:59:66:8c:82:8a:27:ef:
         48:76:ac:c3:57:d6:3d:e0:3d:79:c4:25:89:fd:6a:85:8d:48:
         66:20:52:ba:14:fc:ef:4f:8b:19:e0:aa:9d:8b:c3:41:ee:b6:
         43:1c:8a:3e:20:97:7f:64:0f:36:0f:b7:16:cd:9c:3f:96:f1:
         c7:e6:0a:70:7f:7c:80:73:ee:90:a1:2a:a8:d6:97:2c:15:2c:
         e3:03:ef:e6:d9:87:5d:27:ad:b9:36:35:30:43:a7:e4:80:8b:
         4b:e8:44:4f:9b:f7:59:1c:b3:2c:fe:be:f4:ee:66:7a:d7:96:
         6d:0c:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:13:39 2024 by rpki-client on console-ams.rpki-client.org