Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
File:                     8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa (raw, json)
Hash identifier:          35BUVaGySvW/JieZdiSkISDlOt4fT3yf+gSxuvws38A=
Subject key identifier:   7C:41:42:14:24:C4:68:3D:02:18:CC:97:FD:D3:C3:90:67:E4:F3:B3
Certificate issuer:       /CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
Certificate serial:       010D0C9F4328584563F304F325C1C236038F0900
Authority key identifier: 52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     63300
IP address blocks:        192.70.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:04:f3:25:c1:c2:36:03:8f:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=d58ebf4d-f8d7-4d37-92e8-e0dbf3f3ea86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:b6:47:a5:ee:df:62:d2:99:f5:80:a8:f6:
                    53:a4:22:34:4c:3a:5f:2c:15:33:4e:76:f3:6f:3d:
                    d8:65:91:f3:62:2b:c4:17:8f:79:fb:5a:db:35:37:
                    c2:74:e3:46:f2:90:24:20:aa:f7:c5:5a:11:88:f0:
                    1e:02:dc:cf:c6:7f:65:66:88:55:ce:50:7b:bd:1f:
                    ec:c7:9a:65:59:88:b0:ec:e3:a9:40:15:3a:29:d7:
                    81:bb:f9:ad:21:be:b5:17:36:c7:37:a9:ac:02:92:
                    0f:29:b6:51:bd:eb:6c:bb:ba:df:64:9e:d7:43:fb:
                    de:6d:af:65:e3:39:ac:67:56:21:5c:21:65:0c:a3:
                    e8:22:39:a8:19:47:78:87:5f:0e:48:05:4b:b4:15:
                    57:57:24:34:e0:aa:dd:11:5f:ec:99:2a:cf:91:be:
                    59:03:81:ea:fb:b8:4f:fa:a7:50:43:36:b2:8f:c2:
                    ca:1c:53:6c:d3:2a:f5:69:6e:a3:b0:36:12:aa:7d:
                    56:1f:e2:33:66:bd:56:c6:b4:0b:29:24:d3:56:9b:
                    5c:cd:74:68:bb:b2:13:4b:4c:2e:9a:8b:bf:e2:66:
                    6a:a3:2a:98:df:6f:a7:b2:50:31:c3:76:a6:42:8f:
                    e3:bc:77:bc:66:e9:f4:8e:8c:cc:e2:7f:cb:14:70:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:41:42:14:24:C4:68:3D:02:18:CC:97:FD:D3:C3:90:67:E4:F3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:57:d2:4d:eb:fb:d2:bb:57:eb:02:20:d9:2c:70:ae:9d:52:
         71:ff:c2:71:f1:04:30:ad:45:e1:8e:3f:d1:76:51:da:10:0a:
         11:c4:be:95:57:10:f9:34:f7:ee:2b:76:a8:94:59:7c:73:b4:
         96:4d:bd:bb:23:ab:7e:f5:d7:89:83:a7:20:d2:de:47:19:ac:
         09:2e:d6:26:85:a4:ca:ef:fa:28:0a:81:bc:60:bd:b0:89:e6:
         5b:6a:05:94:4f:fc:94:f4:1c:a7:e8:29:82:51:bf:c1:3c:f7:
         89:ba:1e:71:de:c2:01:d1:83:6a:37:20:c4:af:db:1c:83:e3:
         0a:55:e3:2a:0a:68:3d:23:48:75:f9:df:e5:e5:e9:43:bd:97:
         f1:22:dd:cf:2c:7e:c6:bb:0a:20:57:c2:7e:e9:89:c3:8b:ab:
         d5:63:66:f4:9b:41:05:7d:56:0f:22:97:b6:79:81:02:cb:bc:
         34:75:fe:6d:ec:9c:dc:d9:f2:18:45:85:26:a1:75:97:ae:c6:
         fe:51:13:35:41:d2:0b:1b:fd:16:7a:8d:c3:8a:22:d7:fb:0e:
         19:65:d3:8e:39:f7:36:bf:cc:d4:9c:f3:07:c5:91:30:07:4b:
         d2:d4:dd:c1:b7:3b:2b:a9:13:9a:45:38:bf:f7:54:2a:11:16:
         b3:5e:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:39:10 2024 by rpki-client on console-ams.rpki-client.org