Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa
File:                     3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa (raw, json)
Hash identifier:          FHUlV03esKvcG6JlQcWwI50kZvhg+9zT2sIsOPSLFgA=
Subject key identifier:   AD:19:30:17:DA:D6:42:39:CA:B3:B9:11:04:E6:7C:C3:DC:B0:3C:7B
Certificate issuer:       /CN=371710da-4c28-4923-921b-e1d710cec29e
Certificate serial:       010D0C9F432858455C835D81D0D18A4C87E27E80
Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa
Signing time:             Thu 28 Mar 2024 21:05:08 +0000
ROA not before:           Thu 28 Mar 2024 21:05:08 +0000
ROA not after:            Wed 26 Jun 2024 21:05:08 +0000
asID:                     198949
IP address blocks:        208.68.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:83:5d:81:d0:d1:8a:4c:87:e2:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e
        Validity
            Not Before: Mar 28 21:05:08 2024 GMT
            Not After : Jun 26 21:05:08 2024 GMT
        Subject: CN=9b5b64e1-7276-49fa-aba4-f93770c8e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:23:47:b7:8d:37:86:f1:eb:14:59:69:a8:
                    01:47:cd:90:1d:75:b3:a8:be:0e:81:c0:67:50:19:
                    14:ac:86:aa:e4:e8:cb:99:c4:e0:aa:39:5a:4a:d0:
                    d8:7e:3d:b0:30:81:b7:ee:1b:33:82:6d:31:4f:d1:
                    f6:cd:e5:f5:5a:00:ee:b7:a3:ba:91:8e:da:ab:7f:
                    96:fb:35:31:1b:e4:5e:f9:3e:be:4a:8d:ac:64:f0:
                    43:00:55:2e:66:2c:7e:ab:de:75:fc:dd:d2:f5:de:
                    f7:43:11:9e:67:71:cd:f6:ff:b0:f9:48:81:2e:48:
                    c5:c1:37:a8:77:81:e5:88:83:bd:9d:7f:db:0b:28:
                    0a:d0:c0:56:77:a5:d4:5b:55:61:4f:19:c7:58:e6:
                    1c:7f:18:1a:63:97:c5:e1:87:15:94:0a:1e:f0:b2:
                    3b:11:00:c5:f4:78:79:7e:1b:24:3b:45:8d:d3:b1:
                    41:2a:fc:21:8b:11:0b:4e:4b:8d:46:4f:85:bf:3a:
                    83:af:78:7e:70:dc:cb:e2:34:bc:e9:99:9b:37:43:
                    ac:3c:6a:54:bd:eb:73:4f:d6:fb:6d:6d:83:3b:e5:
                    71:52:6a:59:a8:f8:6c:4a:67:2f:08:99:58:5a:00:
                    27:06:b7:8d:1b:e9:d1:5e:18:b3:9c:06:bb:5a:54:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:30:17:DA:D6:42:39:CA:B3:B9:11:04:E6:7C:C3:DC:B0:3C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:b7:d2:f4:3b:bf:e4:a6:08:fb:c8:7a:50:83:a9:f1:ef:
         47:47:c2:4b:a2:e0:97:ac:b4:9c:f6:47:98:6d:5d:8d:70:04:
         cc:13:ec:2e:76:1b:71:b7:07:93:05:a9:3b:0a:9a:74:41:17:
         98:56:9a:ae:0a:0a:6c:75:ed:9a:91:dd:de:c6:b4:66:b6:21:
         fe:14:2f:9c:d5:bb:ab:2e:f7:d6:cf:e1:53:4b:6c:10:3a:e1:
         b4:29:0e:5d:a2:b4:67:5f:40:92:91:a2:90:15:0a:6f:97:5d:
         ff:28:2e:9f:38:31:62:d2:ec:25:a0:e4:a3:91:ab:a1:0b:be:
         59:3d:ae:d4:75:e5:05:35:75:62:74:db:31:fd:45:9a:ba:95:
         77:b7:5b:6e:2e:2a:6d:99:40:4a:be:50:fe:03:c7:82:7f:50:
         7f:53:ed:4b:7b:34:b8:02:a8:1c:dc:f1:7f:b8:b1:2c:9a:13:
         c6:77:85:ed:2c:93:09:a8:41:b8:00:27:09:5c:cd:91:57:c3:
         18:ab:fd:5d:cc:d6:78:ba:49:57:5e:ea:df:cb:4b:1f:43:bd:
         ad:81:11:59:a0:9f:c0:3a:9c:dc:ec:ad:c6:a1:fa:43:3d:a0:
         08:1c:8a:15:97:3f:bb:b1:29:9d:ee:e5:54:dc:3c:75:50:e5:
         52:4e:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:31:09 2024 by rpki-client on console-fra.rpki-client.org