Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa
File:                     13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json)
Hash identifier:          TSQa2h1Pn4KbsEcleeXRBCPtZlLGQE4/qd98YeQfzsQ=
Subject key identifier:   30:83:F5:BB:56:D1:8D:17:E3:2A:C7:F9:E5:D5:70:2F:A9:96:2D:2B
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D29FEE9D4A52CEC34F2D700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa
Signing time:             Tue 09 Apr 2024 13:46:44 +0000
ROA not before:           Tue 09 Apr 2024 13:46:44 +0000
ROA not after:            Mon 08 Jul 2024 13:46:44 +0000
asID:                     16696
IP address blocks:        137.220.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:29:fe:e9:d4:a5:2c:ec:34:f2:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 13:46:44 2024 GMT
            Not After : Jul  8 13:46:44 2024 GMT
        Subject: CN=a52f3ff5-c067-4f46-98c8-f96873f883ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:df:3a:90:4b:90:be:19:55:c3:16:71:7b:
                    63:22:38:94:58:92:1a:a3:a6:7a:99:69:d3:50:b7:
                    e7:3c:35:80:54:e0:de:df:5d:bf:d5:00:87:f1:4d:
                    be:a7:42:dd:18:e2:d7:b2:46:96:03:d0:80:9f:e4:
                    e8:fa:02:cd:86:d7:f4:7d:8b:9e:7e:62:7d:c7:aa:
                    37:9f:ad:66:21:2e:f8:ef:e2:78:a4:86:7b:5f:a6:
                    fb:04:6d:13:52:af:33:63:83:7f:d9:5b:e7:dd:47:
                    fd:c3:9d:66:57:95:82:f7:83:ea:2f:14:04:65:2a:
                    96:e6:32:bb:70:94:39:51:16:11:26:33:d1:db:5d:
                    64:e9:b4:48:fb:13:57:ec:8f:93:b2:93:2a:fc:06:
                    cd:8f:87:08:57:d6:7a:26:ab:6e:eb:fd:47:92:04:
                    d2:94:c8:b5:37:1c:e0:4b:e8:7e:10:52:ce:c8:e7:
                    39:a5:55:43:ff:15:10:8f:fe:fb:ba:39:0d:c8:40:
                    da:73:c9:86:eb:4e:f1:44:68:09:d2:7a:83:81:57:
                    17:ec:2a:3c:eb:56:2b:34:f2:ba:8f:6a:37:bf:1a:
                    f8:f2:ad:87:7a:74:ad:53:4d:0a:6e:6a:af:65:51:
                    02:f8:bc:12:5b:af:c5:a3:18:2a:ef:5d:37:43:0f:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:F5:BB:56:D1:8D:17:E3:2A:C7:F9:E5:D5:70:2F:A9:96:2D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:30:a6:46:e5:c9:2c:f6:af:c9:64:87:3b:98:28:78:a0:
         38:8e:d0:9c:34:0c:b9:d1:93:bd:49:8c:0c:97:54:36:ec:6a:
         5a:c3:5e:d3:f2:f8:56:25:d9:f5:8f:4b:ae:31:e0:6b:76:71:
         6c:0c:f3:a3:60:19:a0:2e:77:bf:f1:d4:f0:1c:3a:cf:79:88:
         f1:6e:cc:00:24:2d:80:dc:8a:62:6e:04:95:3a:00:0d:b1:ba:
         e0:88:9f:ad:b5:cf:89:66:5a:e2:36:ff:f4:d5:99:19:31:ea:
         55:e8:cc:5f:81:cf:8a:50:b8:26:cd:05:06:16:c4:e7:08:65:
         29:dc:62:72:f0:a7:0b:fb:02:5f:02:c1:28:89:9a:6d:ef:05:
         2c:75:63:ea:cc:f5:9f:b9:98:31:bd:3e:ac:7e:9f:ee:bd:de:
         52:10:8a:95:81:dd:9d:1e:d0:0f:cd:7f:ee:71:e1:51:bc:c0:
         bb:b1:ac:d5:db:02:d9:3e:d4:b3:da:85:85:ce:f7:34:76:78:
         ca:b1:e9:68:f0:4b:29:df:b9:8b:ff:5f:1a:80:6b:56:15:52:
         d1:21:14:a9:ca:29:be:7d:c0:16:1a:4d:5e:42:38:64:cb:9d:
         6a:9d:d5:7c:66:7b:51:be:9a:9c:b3:42:3f:28:e6:7a:f3:71:
         4f:4f:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:11:08 2024 by rpki-client on console-fra.rpki-client.org