Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa
File:                     dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa (raw, json)
Hash identifier:          +wmxhxxlt9W6BwF7Q9hL3yJEWNMFqv/qG6iCHjUTgf8=
Subject key identifier:   2A:97:FB:F1:9E:77:23:7D:4F:93:D3:E5:A6:A0:28:E1:B6:C4:BE:1E
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285844F035526E58C2453B2CB59C40
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        216.128.128.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:52:6e:58:c2:45:3b:2c:b5:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=84c66b44-0bc9-4482-8485-a296bbf3cd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:eb:35:d7:70:3b:f5:3c:32:a7:67:13:78:
                    41:88:2e:53:7b:0b:88:1b:5c:e5:3b:ab:8e:a4:4b:
                    6d:b4:e5:1a:bc:72:8a:48:6a:5d:b1:f6:4e:87:57:
                    58:b0:57:dc:cd:ab:01:14:4e:a8:bd:d9:c6:23:55:
                    3e:d6:c9:d4:a4:4a:6a:39:9f:a1:49:06:b3:c1:c3:
                    05:a4:13:bb:e9:94:01:3c:69:67:1f:c2:da:11:c3:
                    dd:bf:e7:c6:d9:39:1e:0c:53:aa:37:4e:e8:36:0b:
                    f0:41:ab:d0:fa:f4:a3:76:91:df:b4:98:30:47:3d:
                    a3:fe:9f:29:fa:4d:88:85:dd:21:b6:d2:be:56:3b:
                    60:86:23:d6:65:fa:25:be:4c:d9:64:59:93:fb:c3:
                    94:54:83:d2:dd:5b:7a:21:b8:09:e2:73:91:7c:a2:
                    f9:80:ca:bc:4a:0a:49:00:03:fa:a4:66:80:41:01:
                    5e:72:6d:85:52:93:f4:4c:85:2a:a1:0c:a5:84:03:
                    54:70:b3:58:07:61:f5:8b:28:7d:f4:5a:e4:9e:75:
                    58:cf:6c:3e:15:bf:4c:fb:87:30:bf:c3:9f:37:1c:
                    a9:82:e9:86:6f:d5:a0:20:d7:0a:a8:bd:b6:13:6e:
                    33:a2:7e:99:d1:b3:1e:ba:e1:a0:c3:ac:5d:c7:a9:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:FB:F1:9E:77:23:7D:4F:93:D3:E5:A6:A0:28:E1:B6:C4:BE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:e2:1e:a4:30:69:c6:44:d4:ff:66:43:1b:fd:da:b6:12:
         c1:ae:24:71:68:05:27:5e:48:4a:da:26:33:8c:35:73:a0:2d:
         16:92:20:fe:ce:5d:81:85:48:b6:d2:45:c5:23:41:ac:e7:84:
         57:7e:7d:91:e0:40:cb:d9:ce:14:9c:aa:41:ac:5b:63:4f:5b:
         d4:20:fc:b9:4b:f8:60:4c:2a:4d:e1:50:c7:77:5a:d5:d9:7d:
         f5:22:d5:f5:d1:09:a5:7a:3b:b6:cc:7b:63:06:19:85:93:2d:
         12:30:d1:e8:59:7c:7b:4a:7e:15:ac:65:9e:c8:74:bb:c1:57:
         5b:d1:cc:d4:71:08:44:3f:e0:a6:9a:09:8c:27:7b:b0:fe:10:
         cf:8d:f1:c0:96:66:bf:8d:6b:86:58:23:d9:9b:a4:43:21:d1:
         64:f3:cb:ac:9e:26:a3:c6:e9:b3:6b:32:b5:48:87:77:88:38:
         c8:f0:31:af:fe:2a:0d:7c:11:40:8d:73:aa:d2:d6:a8:b9:54:
         72:17:32:7e:52:ed:ae:b1:c8:37:0c:c8:fb:96:3d:44:c4:c5:
         53:14:f5:45:30:61:f9:d6:c7:6b:82:aa:f0:b6:c5:27:e1:62:
         d7:67:9d:08:ea:a7:7b:14:fe:01:24:10:02:71:23:53:53:f8:
         4b:c0:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:47:46 2024 by rpki-client on console-fra.rpki-client.org