Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa
File:                     89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json)
Hash identifier:          3utVMUAZVOVbf0wW3WdIQWGR9koaaFlk0Utg9btUN8U=
Subject key identifier:   B9:35:15:4B:B4:6B:49:8F:F3:B8:56:0B:5B:C9:77:01:46:43:F3:5B
Certificate issuer:       /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e
Certificate serial:       010D0C9F43285845C4437A62899CE49CD3AC4380
Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa
Signing time:             Sun 05 May 2024 01:00:25 +0000
ROA not before:           Sun 05 May 2024 01:00:25 +0000
ROA not after:            Sat 03 Aug 2024 01:00:25 +0000
asID:                     393966
IP address blocks:        204.239.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c4:43:7a:62:89:9c:e4:9c:d3:ac:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e
        Validity
            Not Before: May  5 01:00:25 2024 GMT
            Not After : Aug  3 01:00:25 2024 GMT
        Subject: CN=6afc319d-cb6e-4c60-a846-6be3044fbd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:7f:9d:d2:18:c5:de:2b:fb:b6:98:a5:dd:
                    56:c1:64:b1:a4:0f:0c:f4:cf:1b:06:cb:81:fe:35:
                    74:f5:a7:d3:b5:7d:4d:09:1b:9b:e5:a8:ab:59:98:
                    8b:20:ed:59:e6:4f:13:e1:60:24:fa:22:c3:12:04:
                    cf:d3:e9:21:75:ac:7e:63:a8:07:f2:93:4a:43:ef:
                    83:85:e5:a4:1a:21:0f:2f:a4:0a:67:36:c2:8f:94:
                    eb:ae:22:fb:52:16:ea:c4:65:17:82:a1:6a:2a:89:
                    e3:06:aa:9b:56:b9:bc:71:d7:8d:ce:6f:7e:2a:bb:
                    9d:e1:14:a3:37:fa:9b:36:b9:78:be:90:af:67:9b:
                    9a:a6:1d:ac:74:b4:0a:86:ee:83:be:e9:28:8a:a1:
                    48:19:1c:17:51:8d:af:07:3c:44:98:81:e7:68:76:
                    87:3f:10:bd:87:2e:5b:48:8d:d6:60:65:ed:30:be:
                    4d:7e:3d:b9:dc:0e:ab:92:d8:15:54:00:8d:21:00:
                    10:5d:8a:29:2d:b5:b6:7c:b9:5e:94:1b:38:c2:74:
                    bf:32:0f:9e:57:d2:2e:e0:35:57:b2:cc:5b:be:3f:
                    41:53:2e:41:3d:af:01:34:d3:25:01:64:39:80:b8:
                    6f:05:56:9f:06:dd:82:25:0b:ad:c7:1c:37:1c:fa:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:15:4B:B4:6B:49:8F:F3:B8:56:0B:5B:C9:77:01:46:43:F3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl

            X509v3 Authority Key Identifier:
                keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:e7:c7:2b:86:07:0d:51:d0:76:79:7a:78:47:15:2e:e0:
         13:1d:f2:a8:d1:4e:44:c0:95:a9:05:1d:b9:eb:66:1a:a1:0f:
         b8:9d:ed:95:bd:41:fc:b3:f7:aa:02:0f:54:8f:88:57:1f:c9:
         f6:74:a9:48:92:25:06:e5:41:41:bd:00:28:c6:1c:a5:39:b3:
         65:47:0e:13:11:c1:cb:ef:4b:f8:2c:61:ae:fe:33:a2:e0:cc:
         a1:8c:7c:ea:4e:ab:4f:ef:e9:6a:1d:5c:20:3c:91:9a:08:f4:
         6c:92:8c:e2:46:5b:d7:5e:82:61:03:1d:37:48:aa:50:59:64:
         eb:16:1b:94:d8:95:5d:3c:f4:44:ce:ec:a8:c9:4e:8c:8d:5f:
         07:5e:f5:84:b2:17:79:36:22:33:6c:74:08:43:e1:58:b9:cb:
         a2:a9:16:bb:3a:44:31:90:1d:cb:09:2a:54:9a:5e:70:9d:c1:
         a7:c5:e3:3f:25:d0:7e:a0:30:6b:1b:4a:74:95:83:59:71:52:
         81:77:53:e3:61:5b:56:a3:3f:fe:20:09:b1:68:32:81:ab:9e:
         d4:86:b5:d0:fe:ed:f3:96:7f:de:fe:21:b3:54:09:4c:17:80:
         a7:d2:13:c4:48:0d:56:30:f7:5f:d2:0d:e1:9a:6a:92:24:9e:
         26:5e:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:47 2024 by rpki-client on console-ams.rpki-client.org