Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
File:                     5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa (raw, json)
Hash identifier:          PcH/tT/rA/rU1EHS1jT0fW4gmFUjw/bJzjJuHpO+ZHk=
Subject key identifier:   73:AB:BA:9D:EA:E0:1A:19:75:58:DE:A4:A3:9D:FF:AC:31:42:79:04
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C5309B816A5217DC1A6D140
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     10359
IP address blocks:        216.165.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:09:b8:16:a5:21:7d:c1:a6:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=f3bce770-431b-4bd9-976f-661abe1d5ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:c9:58:59:24:cb:e9:2b:f2:2c:82:f8:6e:
                    20:92:6a:42:65:b0:8f:90:77:a0:77:e2:16:fe:f2:
                    7e:06:33:25:14:92:29:be:85:fe:35:c5:68:7d:ae:
                    37:2f:4b:28:e7:d3:fc:d7:64:aa:82:d3:17:dc:4a:
                    f3:30:4e:c5:1d:74:5a:22:13:db:f6:79:3f:62:46:
                    c2:2b:fa:a1:83:be:c0:81:c6:5b:9f:10:51:6e:af:
                    e3:00:d0:be:76:15:11:5d:4b:91:a4:4d:15:0f:cc:
                    57:6d:48:dc:a5:40:be:5a:0b:38:5f:26:66:ca:7d:
                    eb:b8:6a:e8:36:0e:10:8a:e5:07:e7:e2:17:6d:3c:
                    e8:10:ac:51:c8:97:84:d6:ab:af:13:01:24:3d:ca:
                    03:42:fb:be:cb:bf:e1:4e:da:22:fd:cf:7d:c6:26:
                    03:5a:4a:38:97:6e:3b:e9:f3:cf:9c:a3:8d:f0:be:
                    06:f2:5b:96:59:09:64:64:b5:e6:d8:8a:a6:91:81:
                    6c:21:10:77:4b:10:70:02:7b:6f:9b:26:13:3b:54:
                    af:0b:5a:70:01:fb:5b:77:84:f9:45:f6:5d:c7:dc:
                    fe:8a:a3:29:61:41:48:bf:26:30:20:b4:75:64:0c:
                    3d:f4:9e:ab:12:4f:eb:65:70:21:78:4d:e0:0e:e4:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:BA:9D:EA:E0:1A:19:75:58:DE:A4:A3:9D:FF:AC:31:42:79:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.165.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:9c:fa:ca:0b:75:e2:0a:62:c1:5d:dd:2c:61:ab:97:9d:c1:
         00:24:ce:c0:07:8d:1e:1e:c4:04:b6:2d:6c:e9:9a:a7:52:93:
         c2:30:1a:d2:b4:37:5e:8e:26:b2:67:02:c2:92:23:ea:15:6b:
         cb:54:0f:9d:91:9a:be:72:dd:66:46:3b:d8:24:b1:82:1b:7d:
         b2:b5:69:7c:1c:84:d2:b3:98:bc:8e:51:3a:7d:a1:98:9c:a7:
         82:11:b8:9b:a9:6b:8b:0c:60:85:fa:5c:28:ef:56:0e:97:11:
         3a:07:e4:2d:66:83:6e:0a:42:8b:2e:62:a0:3b:ce:20:9f:f2:
         83:5f:7b:f9:28:1a:57:72:4a:f3:5d:44:5b:54:20:77:79:65:
         7b:a4:36:cc:11:c6:78:90:bc:6f:1b:25:ec:31:e3:59:e0:f9:
         1a:7b:ac:70:03:27:e6:93:e7:d3:a3:99:85:d9:93:66:a3:ba:
         16:6c:07:6c:48:bb:38:cb:83:07:75:cd:9d:fd:e7:f3:06:fa:
         f9:83:97:63:a1:e6:c7:8a:2d:20:d7:08:ba:eb:46:99:7b:d2:
         ae:9d:0e:7f:4f:0c:31:4b:a0:03:5d:11:e8:46:96:75:1f:52:
         8d:2f:4d:e9:7e:1a:7a:d2:9f:f8:a7:3b:57:33:7f:24:44:7a:
         2d:db:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:14 2024 by rpki-client on console-ams.rpki-client.org