Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa
File:                     e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa (raw, json)
Hash identifier:          z0DPEv8oywzsTJuoFU2aFclm03r8SKdFEIxVTbEWUQk=
Subject key identifier:   39:B1:99:D9:ED:5C:BF:94:0A:B3:8E:15:02:9C:C1:14:17:5B:6C:76
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285845E45E769FAF6EF71DEDF24600
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     62802
IP address blocks:        65.170.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:76:9f:af:6e:f7:1d:ed:f2:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=040cf154-59ea-4a8d-bef8-8df799887511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:2b:6e:1b:b6:7b:fd:45:f3:b4:cc:82:b3:
                    bb:8a:a4:27:2e:60:bc:64:87:3b:86:91:88:ad:78:
                    00:20:05:f8:34:a0:67:34:0d:d7:20:fc:44:61:14:
                    d7:06:64:03:7f:d2:15:f0:56:e3:e0:ec:02:df:bd:
                    ee:b8:7f:40:07:f1:35:32:48:c9:f0:e7:be:89:25:
                    f2:0e:87:1f:cd:ed:2e:3c:e6:9e:e3:b3:27:4b:97:
                    e7:13:40:50:1a:9d:e7:e5:c1:6f:06:63:67:b0:8f:
                    e5:82:04:89:f9:5b:82:8f:96:91:38:01:41:02:98:
                    97:2a:c8:8c:f9:f8:fd:b8:d8:78:0c:a1:b6:83:4a:
                    99:f5:44:59:f5:6e:ce:02:06:f5:d2:48:e6:ea:9e:
                    ac:3d:43:af:15:21:c3:65:04:9a:82:17:1d:4a:db:
                    a3:18:a6:e1:3d:64:e8:a0:ab:4b:11:91:c9:0e:7f:
                    1f:e6:67:a0:6f:d0:32:22:b2:5a:f9:e0:43:b3:83:
                    9d:36:51:86:5b:2a:fc:59:75:fd:1d:19:a1:df:ee:
                    34:09:52:de:70:22:52:4f:7f:b1:ba:f7:f4:15:cc:
                    3b:94:49:7f:36:73:ef:84:dc:33:a5:5d:88:bf:11:
                    83:22:d8:e4:8a:5c:ac:13:31:97:82:36:a3:27:78:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:99:D9:ED:5C:BF:94:0A:B3:8E:15:02:9C:C1:14:17:5B:6C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.170.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:54:e5:2e:7f:e1:72:47:30:d9:6a:9b:99:ad:a7:6b:fe:
         d6:bf:61:21:bf:4f:ef:00:90:98:f8:4e:79:73:f7:63:67:b7:
         eb:4c:02:6a:9c:ed:19:e9:de:ef:d9:0a:e9:50:bb:6e:47:3c:
         de:ed:0a:8b:bd:37:06:ca:9a:9b:66:41:1c:76:05:ea:10:6b:
         8d:ea:0f:a8:61:2b:15:57:4e:2d:10:f7:1d:64:8e:9e:a5:7d:
         85:67:bf:93:7b:b1:b1:35:02:02:d6:ea:3d:26:9b:46:e3:41:
         92:db:f3:6b:9a:cd:08:0d:52:7a:74:7b:e4:41:69:63:5d:bd:
         4a:14:62:65:18:ff:80:6d:5a:af:2c:8c:9b:c9:f1:18:67:42:
         65:54:91:20:1a:a7:d8:0f:9c:cf:61:3e:9a:a6:c3:17:61:fe:
         36:36:d9:02:ef:69:59:ea:1f:21:8e:eb:ce:04:96:d3:dc:63:
         4b:0b:93:8a:f0:f1:7a:80:e6:b6:45:37:9c:19:60:7a:4d:78:
         a0:ab:cb:7a:0d:f3:56:ed:2e:78:dc:a8:1c:2a:9a:47:bf:3b:
         5d:b0:b7:af:db:2b:53:07:cc:7b:88:6a:99:6f:76:fd:c3:c9:
         cf:60:98:9e:82:16:4e:ab:1a:42:f5:f2:aa:02:ff:7e:e5:82:
         96:17:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:56:35 2024 by rpki-client on console-fra.rpki-client.org