Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
File:                     3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa (raw, json)
Hash identifier:          qWhnk5aEiCaBnqCkgFJ5igeuAkvh77EjmmU4ybhZZs4=
Subject key identifier:   F4:AE:C4:F4:E0:34:F3:4F:C4:29:3F:CE:18:74:63:B5:69:D7:A9:EC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285845777DE4297A554DF7C4A0C140
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     396982
IP address blocks:        208.127.208.0/20 maxlen: 24
                          208.127.224.0/21 maxlen: 24
                          208.127.232.0/21 maxlen: 24
                          208.127.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e4:29:7a:55:4d:f7:c4:a0:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=6651f250-ac55-42a7-846b-0a4fb9e117a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:3d:3d:34:7a:58:6e:0b:53:b3:17:04:bb:
                    cf:f9:78:1c:8e:56:c7:c8:1d:99:3a:5e:ed:21:62:
                    6b:f1:f9:e5:a6:cd:ce:76:cf:ae:b2:c9:aa:76:fa:
                    02:b7:4c:8d:af:e6:c6:15:30:f5:a5:f9:95:fd:bb:
                    a8:09:97:17:5b:05:28:bd:f8:07:1f:d6:ce:89:15:
                    21:af:f8:68:b4:76:d5:bb:a0:e2:fb:df:bf:df:87:
                    a0:68:f2:94:4f:ec:cd:a2:10:3e:0a:87:1a:62:28:
                    45:87:14:38:a5:28:5e:ed:65:93:b1:2a:0c:ed:3b:
                    ca:08:1e:6e:7e:c2:07:61:47:c4:45:b5:0e:1c:ce:
                    5d:12:a9:1c:80:9b:ea:94:4f:fc:ce:22:63:2c:22:
                    44:85:19:b8:b3:14:d7:6d:d8:e3:88:27:dd:5d:0a:
                    c4:36:ef:39:a7:52:ea:e7:08:aa:29:17:ea:21:f4:
                    99:24:e6:c0:37:d7:fe:ac:1e:eb:18:56:af:a0:be:
                    cd:a5:25:6f:c1:3b:b7:69:6d:46:67:80:d6:40:67:
                    26:97:65:a4:e9:86:36:b9:c9:e0:49:3d:4a:bc:fd:
                    dd:37:ab:bf:f7:55:eb:e4:b3:a7:47:f0:04:e8:8f:
                    5b:fa:08:b6:24:78:20:06:74:f5:1a:a0:8e:28:73:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:C4:F4:E0:34:F3:4F:C4:29:3F:CE:18:74:63:B5:69:D7:A9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.208.0-208.127.247.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:79:21:86:34:24:f6:0d:cd:1e:1c:fc:54:09:03:3a:8f:
         99:5a:be:7c:75:06:35:06:d6:46:c5:b2:0e:70:0d:6b:a8:07:
         d4:76:94:89:67:94:4e:ab:0b:e0:18:b1:a0:90:32:b3:e0:36:
         f4:11:b5:0a:6b:a0:57:1a:eb:0d:4c:7e:78:05:77:fe:fd:81:
         6a:c6:85:e5:1f:d2:f6:be:76:15:d2:e5:4c:7c:14:3c:f1:f7:
         34:63:30:06:00:fa:3b:96:17:1f:37:40:e3:d6:02:5c:91:af:
         01:7b:89:55:26:7e:f3:c0:42:34:71:f9:ed:67:86:d6:79:b4:
         da:14:1c:be:67:a2:01:35:0d:6a:ea:17:06:f1:06:d4:58:95:
         7b:83:b2:15:51:1a:d0:25:02:92:94:ce:dd:c5:38:04:e4:73:
         10:2d:7f:5f:02:c9:84:42:49:6c:99:b6:2f:d8:f7:cf:e3:9c:
         0b:a3:f0:ac:07:23:b5:d1:fa:e6:3f:b0:89:80:42:2a:2f:93:
         6c:61:34:54:87:3d:32:32:a3:79:8d:c8:4e:78:7a:6c:3b:c5:
         aa:fa:70:c1:1e:9f:ee:5f:9d:c9:5d:d9:0e:13:7f:4f:19:f7:
         0c:8a:4a:05:0b:cb:41:19:0a:7a:51:37:e1:f8:7c:c5:6b:18:
         b4:9c:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:49:41 2024 by rpki-client on console-ams.rpki-client.org