Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/06af7d26-1e84-3594-af08-888072e6860e.roa
File:                     06af7d26-1e84-3594-af08-888072e6860e.roa (raw, json)
Hash identifier:          foYCxrJvMdujiLycchr3qu+ZwVBhTgh+PZOZ44opkgc=
Subject key identifier:   03:B7:97:84:0E:95:E1:D1:99:34:BB:2B:8C:E7:1C:E9:08:6A:05:ED
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285845734DA83C7F2735BCDCB90380
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/06af7d26-1e84-3594-af08-888072e6860e.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        144.81.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a8:3c:7f:27:35:bc:dc:b9:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=da01cdd1-7455-4c44-bc17-cc04a76c15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:27:00:8d:8e:0c:e0:21:2d:be:e9:68:cb:
                    39:75:53:49:db:29:4f:56:3c:44:e7:ce:1e:22:53:
                    b3:44:4a:6f:8c:a5:7c:8d:90:39:b8:5a:60:fa:06:
                    ef:94:8d:04:a5:e3:86:57:bf:6b:c0:50:87:5d:6c:
                    b0:eb:db:dd:29:13:c5:dc:2e:56:3b:22:9b:c4:0a:
                    e6:eb:c9:5f:3f:a8:e2:81:78:1f:10:9e:82:aa:87:
                    09:b2:37:9b:ce:4f:96:40:4f:3c:6b:71:64:c5:99:
                    e3:78:a1:10:9a:b5:f2:ad:38:e4:3e:0d:fc:80:53:
                    65:35:7d:b4:86:c4:cc:85:96:e2:60:ee:9c:d9:67:
                    9d:78:ca:71:c1:41:e0:45:91:1d:08:51:e0:9b:44:
                    08:ab:f9:cb:81:31:69:fa:74:1e:65:e3:20:a0:b6:
                    79:bd:f2:2c:3c:dc:90:04:d1:fb:64:4d:4e:17:61:
                    8e:c6:7b:80:58:11:4a:34:25:45:1f:3f:90:64:a2:
                    9f:3f:fe:ac:e5:d0:ba:bd:9c:77:1a:18:80:ac:29:
                    1a:cb:4c:3f:7f:5b:01:d6:68:11:3b:72:9e:e2:45:
                    cd:f3:3e:96:87:d4:fe:ce:51:2a:10:e4:48:52:91:
                    e3:0f:45:88:1a:15:16:80:49:9b:71:5b:3e:be:71:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:97:84:0E:95:E1:D1:99:34:BB:2B:8C:E7:1C:E9:08:6A:05:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/06af7d26-1e84-3594-af08-888072e6860e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:94:dc:ed:68:21:6b:02:11:04:79:ca:94:1e:d8:50:a7:
         63:2c:70:c2:69:bc:ae:b4:ee:db:ea:1b:ee:be:45:f4:78:73:
         f6:ff:6d:5f:fc:fd:60:ee:48:da:ac:2d:ec:0d:ec:a9:c7:d7:
         cc:d2:56:cd:97:19:01:6d:7f:97:36:5f:f4:38:34:9f:8a:9b:
         60:f8:6a:d2:07:0c:90:ed:4b:5b:a0:97:24:a4:b6:34:4f:b5:
         8a:5d:86:c9:a0:61:1a:20:ba:ce:7b:28:ca:ad:2d:cc:7b:d6:
         e9:b3:96:e2:6c:42:6f:e5:a6:4e:34:2f:f8:cf:7c:51:6d:4c:
         22:f3:c0:9d:3b:62:00:de:14:f8:4c:a8:47:1a:16:87:db:d8:
         fc:5b:a8:bb:e5:97:79:f1:7b:a8:ea:96:a0:df:f6:dd:18:cc:
         3f:09:ee:6b:83:8e:b8:be:2f:94:bd:b2:44:07:5d:b6:f4:e6:
         1a:e7:1d:b5:eb:67:2f:4b:c9:55:9d:61:6f:df:9b:fd:8e:33:
         3a:17:21:4b:19:6d:25:c2:03:b2:c1:d7:f0:49:89:b3:32:39:
         71:9b:df:a4:a3:de:84:b2:e7:26:22:fa:62:94:9f:9c:ba:c2:
         f4:41:5d:be:58:f4:aa:89:6a:99:80:78:42:95:11:f6:e8:67:
         5d:c2:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:04:03 2024 by rpki-client on console-ams.rpki-client.org