Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa
File:                     2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa (raw, json)
Hash identifier:          AVXxuLRiVQMUuwl6s3IPDPAuIsgBrVNssZOzywZ1G3M=
Subject key identifier:   3B:AE:B7:BF:F3:A4:99:EE:8B:78:22:92:0B:4C:22:01:C4:E4:55:9E
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F43285845777DC5820B4E0F3049B1EA80
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        216.238.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c5:82:0b:4e:0f:30:49:b1:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=fed3aca5-3f64-4a25-a070-9ff9d032514d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:cd:b0:13:e8:1b:06:92:da:42:ae:45:ef:
                    1a:79:72:cf:05:70:10:d1:e7:12:a1:ba:ae:38:bf:
                    e3:59:7d:86:d2:f4:94:69:f4:3d:77:c3:b4:13:d7:
                    04:7a:01:dd:7e:7f:cf:f2:74:d7:f2:c1:9a:6a:c1:
                    de:1f:99:78:80:6e:76:ca:ed:f5:5c:13:64:77:0a:
                    18:5f:7d:ae:34:ea:b1:a7:ae:86:22:a7:82:e9:c0:
                    84:21:bb:76:7d:5c:87:7e:37:89:e7:2b:62:62:ee:
                    fd:01:57:1f:22:04:7e:7b:eb:97:59:19:52:59:ee:
                    b3:47:f0:57:8b:10:d5:1c:09:79:14:fd:00:ad:5d:
                    a7:24:a6:7d:bf:73:b7:58:f7:37:ac:17:c5:bb:74:
                    ac:67:39:d3:eb:e8:30:2b:0c:a0:5e:b0:8e:b8:e6:
                    35:4e:61:e8:89:71:cd:02:1d:4e:9d:04:33:4e:ea:
                    9e:a4:24:36:6c:b5:4d:57:bb:36:c9:5f:59:18:8f:
                    f5:bf:14:57:61:d4:4c:64:39:ec:d8:4c:93:39:3b:
                    c9:c2:42:79:c3:7a:ed:e1:40:d3:f9:ec:63:35:00:
                    54:94:71:c8:53:4d:88:9c:1b:88:2c:00:a4:e7:13:
                    d5:b7:b1:d2:72:be:a4:75:97:a0:f3:9d:b8:48:cc:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:B7:BF:F3:A4:99:EE:8B:78:22:92:0B:4C:22:01:C4:E4:55:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2dd6cf0f-ac70-369b-b45f-3ecaed0ff8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e6:30:0b:b5:87:ed:89:ca:f1:82:a6:ae:27:b9:22:2f:b7:
         ff:4a:ea:61:5b:34:69:0e:6f:bf:e5:11:c2:7a:42:ba:ec:5f:
         2e:9d:0b:89:5e:f7:b7:c1:27:72:e5:13:5f:a8:a2:f4:05:d1:
         57:bd:3e:9a:4b:4f:82:c8:26:4e:a0:e5:fc:37:87:06:11:39:
         4d:c0:79:9b:55:9a:ee:e6:1e:2b:30:a7:d6:a8:1a:80:45:bb:
         cb:c4:75:3e:98:15:a7:4f:49:1b:c1:f0:0e:c4:91:1c:06:f2:
         11:98:80:f2:ec:bb:02:7a:2b:a0:d2:13:41:93:65:4e:fc:bf:
         35:a5:79:81:df:bd:3f:a8:58:7a:a7:f4:51:5f:85:52:69:88:
         63:d1:fa:68:69:ba:2e:36:39:60:81:80:70:be:71:e1:a7:01:
         90:37:80:f1:dd:b4:06:df:84:5b:d9:20:ea:13:9b:3b:29:e2:
         4b:76:0c:8f:3a:b8:96:63:31:0f:0d:b7:b2:1b:07:0a:75:7f:
         9c:66:8d:eb:b7:16:5c:9c:d8:d3:1e:06:32:a9:ae:5b:4d:2a:
         30:87:b9:fc:82:c2:e0:a4:51:27:31:7a:1f:ba:c4:e8:1f:a0:
         8d:81:89:e0:ff:fe:be:50:af:7c:45:1b:a1:48:b8:20:f7:91:
         8e:f6:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:37 2024 by rpki-client on console-fra.rpki-client.org