Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa
File:                     c6221ec9-feac-3a26-9d63-107653e5c3c9.roa (raw, json)
Hash identifier:          /2yL4YLkKzQyaGF7OCUHfCIlLMICyypxX/OqbWPUPEk=
Subject key identifier:   83:5B:47:13:28:2D:3C:4F:8C:51:22:3F:43:58:E3:52:21:B9:36:3A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584561284F0F1695FBB1A94C0FC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     3356
IP address blocks:        198.112.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:4f:0f:16:95:fb:b1:a9:4c:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=857e5443-6045-45f5-bce9-1e2ec6b9300d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:63:0b:da:9f:4b:ee:41:9e:f2:bd:9a:39:
                    3b:e6:75:e0:34:aa:55:a4:b9:c6:01:2c:26:b8:ef:
                    2c:0c:ed:a6:6b:8c:2e:36:07:b3:b1:43:ad:d9:5b:
                    b0:17:ef:e1:f3:0f:8a:92:33:8f:47:f0:23:a1:90:
                    b5:94:94:93:d3:52:20:6c:f4:4f:1a:57:2d:42:75:
                    54:fc:78:7e:63:5b:bd:47:e4:bb:9e:74:08:eb:e0:
                    6e:4e:b0:b5:fe:d5:d3:77:49:49:a4:73:1d:ab:bf:
                    70:6e:ee:93:6e:a6:6b:63:02:98:c9:5b:ef:05:f7:
                    5f:dc:d4:c2:a8:23:d4:4f:cf:69:0d:7f:55:44:7c:
                    35:e3:c0:f9:e7:9b:7d:e5:8c:93:cb:c9:d5:ae:e9:
                    c3:70:d3:b4:5e:14:8f:1a:27:77:fa:14:3c:98:f8:
                    86:57:77:02:56:3c:f9:bc:f7:7d:0a:92:fb:8e:48:
                    06:6d:70:d7:da:44:99:43:e9:36:ec:72:4c:13:20:
                    b9:d6:de:e9:c9:71:14:3a:d6:e7:3e:90:83:84:16:
                    67:6f:44:e1:9b:05:a0:c9:5b:66:5c:3c:90:ba:9f:
                    5a:77:03:64:f4:b9:f2:6c:12:0b:5a:59:7e:96:ab:
                    24:97:c8:5f:77:57:d7:22:4b:4b:e6:81:40:45:99:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5B:47:13:28:2D:3C:4F:8C:51:22:3F:43:58:E3:52:21:B9:36:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.112.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:89:95:2a:cb:f0:eb:05:2e:31:fd:5d:f5:c2:27:2c:07:
         3b:9b:db:b1:2d:2d:eb:52:55:b1:34:8f:b4:d8:5b:79:6d:8e:
         82:34:09:14:ff:8f:bc:34:e1:01:74:bc:33:7a:ef:b6:25:80:
         7d:44:16:4d:04:86:8a:ac:fd:f8:8b:5d:e6:b7:8e:63:49:76:
         0b:04:0c:c2:4a:90:a5:0b:bb:1d:ec:ba:29:b1:c1:c0:a9:aa:
         af:af:4d:eb:a6:5c:34:fc:08:c3:04:b9:f0:0b:e3:3d:59:db:
         44:31:95:f8:bb:37:a1:ff:ab:50:3f:6a:bd:17:c5:17:0f:5e:
         32:8e:a2:ba:8d:e2:dd:10:42:d5:0f:14:2e:b4:b3:cc:23:65:
         e3:b8:39:c5:9b:b4:5a:4c:28:94:13:99:46:8c:57:25:e2:19:
         86:07:ee:a0:70:42:49:dd:20:39:36:55:23:e5:60:88:a2:ff:
         21:2a:41:39:0f:31:19:d0:77:ee:f3:d3:8e:85:ae:2f:ed:c0:
         6d:da:b6:92:31:b4:6a:3e:9d:5a:f2:3d:eb:d0:11:ee:63:52:
         c0:62:e7:6e:6f:2e:1c:68:5d:2a:8a:09:ad:b3:44:7a:bb:84:
         7c:aa:03:4b:a6:86:b9:f7:c2:05:3f:c7:ba:31:e8:fd:41:69:
         3d:81:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:42:26 2024 by rpki-client on console-ams.rpki-client.org