Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
File:                     ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json)
Hash identifier:          EyBS1IwLwop3WKfdRkRNS5+4v3TdrH87rjnG6of6duc=
Subject key identifier:   9D:5F:FC:86:27:BF:5B:3C:DE:1E:4C:EC:7D:3C:B8:4A:53:1E:38:3B
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285845351CEFFEE56174C2A102B000
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa
Signing time:             Thu 14 Mar 2024 18:22:13 +0000
ROA not before:           Thu 14 Mar 2024 18:22:13 +0000
ROA not after:            Wed 12 Jun 2024 18:22:13 +0000
asID:                     4213
IP address blocks:        216.176.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:1c:ef:fe:e5:61:74:c2:a1:02:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar 14 18:22:13 2024 GMT
            Not After : Jun 12 18:22:13 2024 GMT
        Subject: CN=3f49712c-9fbc-4194-9594-b211f5457d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e7:9a:70:2d:6d:1f:11:f0:68:48:4a:43:f2:
                    a3:9a:4b:60:33:d0:1f:c1:14:94:a9:3a:39:7a:b7:
                    f2:f8:f7:53:1a:ff:06:8c:7a:45:12:1b:26:03:14:
                    18:95:a1:f0:01:ed:20:88:52:d4:50:bc:c6:61:5c:
                    9f:67:dc:86:f0:d1:0e:8e:fa:06:25:d1:6a:87:96:
                    8a:53:22:83:6e:ee:78:5f:df:7a:e2:e6:9b:0a:d0:
                    00:15:eb:4b:53:38:b4:f3:b6:60:59:06:a0:ae:ff:
                    b9:c9:0e:df:87:3f:ed:b3:d6:b0:a2:98:76:5f:80:
                    a3:6f:d1:76:b9:9e:3d:64:25:85:1e:f0:4d:07:81:
                    d1:9f:04:e3:f3:28:b5:dd:22:ec:8c:9c:5c:14:93:
                    ed:47:20:36:66:bd:d2:cd:d5:1e:c8:00:3e:39:52:
                    1c:6f:36:83:ea:2c:39:cb:4a:79:83:af:c5:a7:62:
                    47:1c:43:a4:e5:a3:4c:04:10:e2:29:a3:d7:87:ed:
                    15:5c:4e:cd:8f:b3:b9:6f:ba:17:63:1f:6a:29:62:
                    90:81:36:d7:d3:c2:92:f7:e9:c7:c4:63:92:8f:2b:
                    d2:0c:db:11:2c:60:be:50:c1:61:ef:0e:bd:12:0f:
                    5c:47:a5:44:98:ed:bf:f1:e0:8e:0b:b6:07:d9:4f:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5F:FC:86:27:BF:5B:3C:DE:1E:4C:EC:7D:3C:B8:4A:53:1E:38:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:13:98:42:ba:78:e7:12:4a:e4:da:ba:fc:37:3f:74:bd:21:
         b8:7a:b8:90:27:c7:17:cf:dd:31:85:9a:fd:0e:bc:d3:6b:52:
         9d:81:ac:c8:f7:72:aa:fb:50:63:7a:bb:17:cb:2d:d0:11:95:
         46:0d:ec:ef:7f:1c:ce:91:50:9b:70:ae:1b:8f:63:ad:ca:44:
         2b:4d:7d:49:43:de:49:c9:42:67:9c:e1:2b:92:37:48:47:90:
         6e:7f:3a:b5:93:c8:ea:a2:e6:b8:c5:04:8c:ae:98:4d:96:89:
         0b:ef:7e:f1:f1:48:74:0b:a5:85:62:bf:cd:dd:a6:f5:70:48:
         f9:f8:6c:b5:40:28:4d:81:f6:17:e6:d5:1a:d5:e3:56:a5:d3:
         cf:e2:37:90:62:8b:b0:20:d7:25:fb:a2:be:c3:7f:d3:5b:37:
         11:d0:2c:c2:cf:6b:02:4c:c6:d2:bc:bf:1b:84:9c:ec:ca:63:
         37:78:bb:12:65:20:a5:5a:d5:0b:66:36:8f:0a:ce:c0:d5:e3:
         99:dd:25:8c:35:a5:4c:5c:71:3c:6e:53:29:de:ab:74:e7:09:
         f3:2b:18:52:91:50:30:19:4a:85:de:2a:9b:45:31:98:85:40:
         9c:43:f7:d1:5a:ee:98:29:60:1f:6a:67:8f:87:b9:e3:76:5d:
         97:d0:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:18:42 2024 by rpki-client on console-fra.rpki-client.org