Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa
File:                     f513d71c-8f60-33be-bd78-41b06d433626.roa (raw, json)
Hash identifier:          x1SOjxD5z1hwBQjtmPjdA5uhS1JyH2jqxq/LPmc+AVg=
Subject key identifier:   4C:D4:16:A5:39:6B:3D:1C:B1:A3:4D:56:F9:89:83:31:A4:D1:85:3E
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F432858459368BBAD73D5F4E7EAB41280
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     40501
IP address blocks:        216.235.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bb:ad:73:d5:f4:e7:ea:b4:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=ae0d8aad-f0b9-4e82-bc3d-82decd166558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:a8:b6:a1:b6:10:76:8e:43:d4:2d:42:cd:
                    6e:2c:c0:69:56:18:58:63:fe:16:c1:b5:05:15:9b:
                    0c:8a:97:a1:b4:6b:2f:8f:d7:5e:7d:88:4e:57:66:
                    f1:02:df:a2:1b:a0:0e:1f:09:b6:05:b6:26:5e:6f:
                    d1:ee:62:f2:9d:bf:28:6c:fe:17:25:ac:80:01:68:
                    71:75:96:e1:8f:2a:2d:65:0e:6b:53:0f:90:ac:e9:
                    0a:99:0d:c2:40:b1:fe:c7:c5:79:51:58:e5:d4:5d:
                    a0:06:92:df:6e:56:a5:54:11:75:39:b9:bf:5a:dd:
                    2c:ef:07:cc:52:a2:a0:4f:df:54:30:80:ad:f4:82:
                    bd:1f:3a:7a:92:56:11:56:e2:d4:97:b3:03:1b:1c:
                    be:35:a1:57:c2:8f:95:f3:88:e6:05:c5:14:90:54:
                    b2:67:7c:c9:8f:37:6f:4d:b6:8b:1c:36:75:d1:f4:
                    a1:6b:e1:2a:83:05:8f:f5:68:ac:dd:d7:14:0b:4c:
                    70:ad:6c:a0:18:0a:ff:7d:8f:77:43:29:f2:90:b1:
                    fe:22:d9:35:44:1c:26:c4:3c:7c:39:bd:67:fc:55:
                    98:59:ff:a6:cd:ee:f3:c3:db:2a:b4:3f:0b:55:6d:
                    ed:33:96:b0:fd:94:64:a2:87:d2:c3:05:7a:77:30:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:16:A5:39:6B:3D:1C:B1:A3:4D:56:F9:89:83:31:A4:D1:85:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:e0:ac:3a:2d:94:04:2e:1e:4f:6d:50:89:86:00:5d:ff:
         8f:ac:11:0f:4d:25:5d:e2:4c:8f:5b:aa:ea:71:54:46:86:89:
         5f:3d:e9:85:a6:10:d1:a6:1a:00:18:59:39:6b:92:9c:57:6c:
         0f:85:28:76:79:16:f4:47:ba:bb:da:78:c7:83:ac:ed:3e:5e:
         ec:e3:5b:98:2a:d4:9a:99:dd:ef:58:bd:a8:90:63:6b:7a:33:
         7d:bd:7e:74:7c:25:6d:52:f1:42:ad:97:3a:a6:92:2e:24:61:
         a9:a2:9f:1d:29:b3:8d:cb:60:05:49:62:a9:ce:71:cd:f1:01:
         de:8d:c8:27:ee:6c:88:8c:02:a4:ae:a7:dd:c0:c1:d3:3e:a6:
         ab:5c:80:81:d7:87:0e:5e:6a:f7:71:f3:bb:9d:26:d8:34:7b:
         9b:9d:af:bd:80:6a:65:a5:a4:9f:04:14:20:b3:c3:86:d0:71:
         50:5e:2b:19:a2:05:87:55:3a:92:80:8b:86:82:c4:e8:db:f0:
         90:59:c1:47:1f:a4:57:30:ba:8f:a1:17:c0:d9:f2:5a:33:14:
         aa:fe:8d:96:4d:84:81:11:74:1f:d1:d6:dc:74:90:33:5d:74:
         f8:00:58:fc:5b:80:93:17:42:6b:93:56:75:1c:76:60:12:46:
         5f:5b:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:40 2024 by rpki-client on console-fra.rpki-client.org