Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
File:                     423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json)
Hash identifier:          s+WqYAS2PuPmLO5k9et50Hb/YmvSl+N/ZQhi18Ur0Ks=
Subject key identifier:   5E:A2:D2:10:DC:7E:AF:9D:97:32:C1:F9:85:32:DC:85:3A:8D:DA:96
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F43285844FCC561DB3562B0F653B41BE8
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     7057
IP address blocks:        216.8.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:61:db:35:62:b0:f6:53:b4:1b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=f6282fba-07ae-48f0-a0f4-c7227b739691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:ff:fa:a9:d1:fb:20:a7:83:3b:ce:17:77:
                    bb:fb:cf:7e:c1:f2:95:de:bd:62:fb:cd:30:c8:74:
                    b9:2c:fa:b5:8b:ec:46:58:3d:d5:e7:69:df:7c:48:
                    c9:88:e8:e0:76:33:fc:10:04:c4:36:72:9e:ba:1e:
                    13:05:fa:11:f1:b2:52:e2:48:33:f0:6b:f2:5c:df:
                    3c:0a:50:a2:64:35:90:85:5e:3c:81:2d:0a:00:b5:
                    a7:57:e6:82:c8:1a:df:15:4d:f6:1f:06:86:b0:38:
                    13:ed:ae:16:18:cb:7c:83:b6:f2:c3:da:db:da:a7:
                    ae:c9:da:e1:6c:15:4e:63:11:88:1e:60:d1:0c:7a:
                    ef:19:dc:34:b1:d3:e4:de:a9:71:fb:51:d0:d9:fe:
                    1f:ad:ad:5a:01:93:bd:8c:ea:b5:25:85:7e:dd:a3:
                    6d:a2:52:c1:6c:6d:e8:2e:2e:de:a5:2e:27:2e:57:
                    5b:4e:25:c4:3d:0c:bb:9f:04:df:94:69:dd:63:e2:
                    40:4e:08:31:15:63:c6:7b:3e:c5:ab:f1:7d:46:37:
                    ef:60:09:a5:ad:99:3a:d2:7f:d1:a9:36:c1:03:10:
                    2c:40:8d:58:6a:ac:86:1e:36:d6:bb:7a:53:34:2d:
                    a7:ef:45:2f:23:56:40:bb:73:28:16:0c:5f:37:0a:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:D2:10:DC:7E:AF:9D:97:32:C1:F9:85:32:DC:85:3A:8D:DA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:48:36:61:8c:7d:b4:aa:86:52:6f:7e:90:c4:72:94:29:
         77:15:75:36:03:b3:ef:d8:95:e1:6a:2b:7c:2e:5e:87:2d:0c:
         c9:a9:e8:85:b3:c4:bf:a3:e5:fc:0d:f4:98:cb:15:d7:a5:d2:
         08:b4:dd:d0:46:30:66:07:38:f6:16:d8:ff:60:29:5f:b7:89:
         44:74:71:8a:6f:e9:91:ec:62:1c:08:bb:04:52:8f:f4:3d:5b:
         d4:3d:38:b5:8a:67:29:74:f8:1c:c5:a4:94:79:22:f8:bd:73:
         7c:45:d4:36:33:3c:1c:ac:20:1f:ae:5e:0f:22:d7:bf:1d:f8:
         ad:c4:49:74:64:8b:73:4e:80:65:28:05:ed:94:c5:ba:19:9a:
         76:27:e2:af:55:52:df:36:25:31:a1:6b:95:41:4b:b6:bf:f8:
         45:03:6e:2c:fd:2e:17:7d:20:01:a8:a7:d0:22:91:20:e5:2a:
         5f:18:51:36:42:65:ab:99:30:9e:5c:37:15:48:38:36:03:c1:
         0b:c6:6d:66:e7:41:dc:63:de:07:22:a0:bf:56:7b:d8:55:6b:
         27:20:a6:06:9f:4f:ba:19:f6:62:5e:7f:bd:10:c2:01:b7:b0:
         60:e1:db:6c:3e:01:d3:e0:1b:55:01:ce:bd:6e:24:24:27:cb:
         c1:fa:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:24:19 2024 by rpki-client on console-fra.rpki-client.org