Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa
File:                     974b8952-186c-379e-b0c2-e4fb964cf09d.roa (raw, json)
Hash identifier:          rtB1RVciBZ5lka3k0zzh0XieuW+PzmsLXwOEUSUv0YI=
Subject key identifier:   E7:66:C5:86:5C:43:AA:53:AC:F1:04:AC:31:17:DD:7E:A7:55:2C:1F
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858455E5DAC3C2037B8AE4E3046C0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     21928
IP address blocks:        208.54.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:ac:3c:20:37:b8:ae:4e:30:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=bbd59de2-5729-4246-b154-8b93b7493d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:99:00:12:1b:ad:2c:84:48:6b:fa:30:fa:
                    c2:47:7e:72:fa:64:5c:4b:54:c0:03:56:be:b9:c9:
                    b2:ff:48:a4:c5:ff:83:d1:44:76:95:96:c7:f8:05:
                    9d:d1:5c:8f:55:a9:50:54:8e:78:7b:06:8d:ce:28:
                    b7:ee:e7:ed:4f:9d:12:65:57:58:d4:f3:e1:b5:e6:
                    1e:ab:60:02:70:4c:cb:15:fd:8b:79:1b:24:00:76:
                    b0:3b:bf:9d:30:f8:a0:28:30:43:91:cc:70:92:90:
                    ad:e8:9d:f0:f3:85:4a:02:8e:31:92:22:12:e3:93:
                    1f:00:93:b4:ac:fa:61:db:b0:d9:30:78:58:6d:30:
                    3a:eb:d6:e8:db:60:e6:0e:37:e7:46:6c:81:3f:1a:
                    5b:22:e1:d3:b9:1b:ee:6b:0b:14:f5:ac:13:91:b5:
                    47:1d:61:e2:d5:33:fc:7e:1d:72:70:6b:77:09:97:
                    74:15:75:25:1b:fb:22:a1:39:77:aa:10:76:98:0c:
                    91:fd:c9:ad:65:36:b6:a2:af:08:ec:03:95:ba:25:
                    22:3d:75:5e:51:48:02:09:b3:3a:1f:13:c1:c5:d1:
                    08:00:b6:11:e0:c5:c2:30:17:72:28:f0:62:96:89:
                    1b:51:74:cb:20:f0:52:2c:cc:cf:21:d3:fa:0d:52:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:C5:86:5C:43:AA:53:AC:F1:04:AC:31:17:DD:7E:A7:55:2C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:35:98:c4:85:49:47:c0:55:f6:79:b2:b1:ad:c4:b9:79:
         af:43:47:65:ad:50:04:01:26:6c:df:6e:d0:b8:c8:73:ca:71:
         f9:11:e8:29:73:0b:78:8a:ec:38:e8:0f:d1:5a:81:b3:d1:6b:
         e1:45:74:2a:d1:fc:8b:81:c7:c5:ae:42:6a:c5:e3:cd:46:78:
         ac:97:a9:90:2e:e6:51:24:90:8b:31:c5:91:9b:36:60:b1:db:
         83:5c:2a:9c:d7:6e:66:ed:ed:0b:f9:b9:2a:62:f6:b9:0d:80:
         d9:bd:8e:c3:c2:96:4e:3a:f6:4c:45:49:63:44:64:eb:c7:2b:
         d7:99:0b:67:55:bd:16:93:7b:15:4c:ad:f1:be:a3:7c:94:11:
         2d:08:89:e7:46:75:57:09:e8:da:50:1d:0d:86:02:63:52:d7:
         5e:76:bb:fa:44:58:32:ad:4f:f8:ac:bb:f7:74:2b:8e:5f:bd:
         9d:05:c2:16:9c:c5:2a:a2:ec:2b:b2:b5:95:b5:cb:83:85:9e:
         78:46:0a:58:e6:2c:15:9f:c5:cc:1b:f6:7d:59:ec:fe:7c:58:
         42:04:0c:42:6c:92:bf:38:05:07:06:b0:83:15:a7:61:5b:d0:
         11:7b:d3:42:af:e1:75:87:e5:b3:9a:76:56:9c:48:5c:71:e2:
         bf:2c:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:26:39 2024 by rpki-client on console-fra.rpki-client.org