Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa
File:                     363970c4-35aa-3380-88dd-203981f8b04a.roa (raw, json)
Hash identifier:          +F9n/x2R9RCyMc4Dd85cInsAfLALmM+GmkJWgL0MS4I=
Subject key identifier:   F4:A1:B5:E9:D6:8E:4D:68:7E:12:D2:BA:94:C0:36:03:97:34:83:1E
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285845A15E13E1EF5E9CADC6071C80
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     139267
IP address blocks:        208.80.40.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:13:e1:ef:5e:9c:ad:c6:07:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=768497ec-eefb-4407-8aa2-d896b018edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:0f:19:3f:56:eb:1f:b1:d8:09:10:95:86:
                    75:c6:12:8c:e0:b5:65:1f:67:61:17:cb:81:d4:42:
                    08:94:7d:f6:b7:67:ca:0c:45:72:01:3f:e5:40:3a:
                    81:34:62:a7:1e:23:18:c1:e7:ff:55:d5:13:64:af:
                    e6:a8:67:e4:44:8b:0e:b2:62:b4:40:58:43:60:1e:
                    d7:90:e4:ae:f0:a2:e8:0d:e6:e0:fb:b4:bb:3b:dc:
                    17:8f:7f:d5:e5:a0:ff:c7:91:57:bf:f3:dc:3b:d9:
                    5c:76:3a:25:62:9a:a1:52:28:6d:9c:d6:30:0c:f9:
                    ee:b2:b5:b7:f4:f6:56:24:98:d8:18:15:cf:f8:fc:
                    1a:9e:a0:09:3f:64:09:43:1e:a6:54:a0:12:e0:90:
                    79:d3:5e:d0:70:8b:11:41:e6:51:fc:f8:05:65:17:
                    83:fd:2e:9d:bc:d4:5a:77:34:be:c5:aa:c3:8e:27:
                    32:5b:64:83:09:11:9b:1b:9e:69:23:c6:fb:d5:0f:
                    01:b4:3b:80:a3:75:c5:ac:fe:66:1f:f9:39:9e:e7:
                    a9:02:e2:35:22:a8:6b:3a:03:05:fa:e9:a4:eb:54:
                    cc:59:21:db:aa:37:91:6c:8d:ad:45:96:7e:9c:56:
                    94:bd:19:f4:4e:fd:26:55:24:31:fc:7a:d6:19:49:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:B5:E9:D6:8E:4D:68:7E:12:D2:BA:94:C0:36:03:97:34:83:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:50:c9:72:53:fe:63:22:d8:d6:a6:34:7e:fa:7a:fe:b3:9b:
         4f:19:d6:2e:b9:9d:5b:bf:b7:61:fa:98:ce:37:16:1b:2c:84:
         57:eb:9f:5d:f6:53:27:74:81:d3:c1:f7:74:87:d1:bd:82:79:
         41:ec:e6:34:13:e1:74:92:27:70:31:5b:f8:1e:c3:e6:b8:99:
         d9:cc:46:2a:05:6a:f1:ca:78:55:0a:17:b8:67:d1:f6:3a:ce:
         b9:32:4f:7b:2f:9b:4d:45:4e:19:a3:41:2b:45:9d:90:7a:0e:
         29:84:1d:4e:86:c7:04:c9:33:2a:bd:d1:84:2d:f0:22:b2:55:
         b0:24:e2:e3:a4:80:87:a2:05:0d:62:e3:3e:6b:87:21:7c:79:
         1e:38:98:e5:36:ef:87:eb:af:bc:f1:f8:6c:51:4e:e1:8f:c7:
         fc:84:7d:4e:71:6a:63:22:76:1f:a5:73:4f:61:f2:59:96:e9:
         51:f9:79:95:88:7e:0d:52:df:91:d4:31:4d:64:29:17:94:61:
         6a:bf:7b:4f:23:0d:14:ed:61:6b:81:73:d1:d3:21:81:3f:b7:
         25:a2:fe:ba:19:72:4e:60:c6:9a:11:7d:29:35:aa:3e:71:d1:
         fa:6b:e5:b9:73:9f:01:c2:67:2d:e7:42:b7:c9:12:d2:2a:99:
         5f:b4:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 07:31:06 2024 by rpki-client on console-fra.rpki-client.org