Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
File:                     529eec86-aabc-3d34-8797-dab3f5a00262.roa (raw, json)
Hash identifier:          ahlmw5js77ZUvlvuFSaliuP3wscZP4Vq9dvgt0SO2Ug=
Subject key identifier:   1B:C1:96:F9:FC:FA:D1:D8:C5:76:65:E8:7F:21:66:3C:6C:DA:0D:D1
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F43285845938A96E4BCE4C02AA7545780
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
Signing time:             Wed 17 Apr 2024 14:09:09 +0000
ROA not before:           Wed 17 Apr 2024 14:09:09 +0000
ROA not after:            Tue 16 Jul 2024 14:09:09 +0000
asID:                     3565
IP address blocks:        208.68.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:8a:96:e4:bc:e4:c0:2a:a7:54:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Apr 17 14:09:09 2024 GMT
            Not After : Jul 16 14:09:09 2024 GMT
        Subject: CN=3037e294-1ea3-430c-a222-fecbc78013b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:bd:7a:a8:13:74:ee:c4:3d:77:90:b9:d7:
                    c3:c8:7c:cf:d8:30:85:97:1d:11:f4:1c:b7:dd:a1:
                    1b:20:2e:ca:75:eb:1d:40:92:44:d2:78:8d:cc:08:
                    8e:dc:e5:4d:33:94:02:0f:33:67:42:18:70:35:5c:
                    20:80:ea:99:61:c8:fc:51:ca:6a:f6:52:b0:c8:a4:
                    e1:78:83:a7:a7:6f:2e:af:4e:79:59:31:09:b8:74:
                    cd:3c:85:d0:1e:13:b3:e3:73:83:b2:9d:fc:bb:14:
                    79:0d:ef:2f:b6:48:d9:71:e0:2f:ba:91:6f:2a:2d:
                    e1:6d:d4:30:a5:91:a2:93:12:9b:19:93:50:10:23:
                    ba:2b:59:ec:66:7b:92:2c:32:0d:a0:30:7b:d2:8b:
                    2c:85:c8:79:e2:d8:25:48:9f:2d:f5:50:df:00:af:
                    9f:56:e0:de:18:0f:10:ba:01:02:80:e2:c4:14:53:
                    db:f8:51:7c:79:79:f6:76:ce:9a:fd:ef:04:67:2d:
                    b8:e3:a5:a6:66:00:a4:d3:3f:54:eb:ae:b4:bd:c8:
                    45:f7:d5:63:28:0c:cd:14:1c:c5:dd:f2:15:92:81:
                    78:b3:68:7c:0f:6d:04:19:d0:20:3b:4a:87:b8:6e:
                    63:87:f2:a2:cf:21:f5:f6:2d:94:58:51:51:49:cb:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:96:F9:FC:FA:D1:D8:C5:76:65:E8:7F:21:66:3C:6C:DA:0D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:66:07:88:50:fe:ec:44:73:ef:09:d2:d8:39:2a:57:aa:e8:
         aa:66:41:96:b5:10:95:ee:ec:4c:b9:82:54:09:e2:68:8b:1f:
         70:03:14:0f:19:fa:7e:eb:b3:b6:fd:81:96:a1:e9:ea:36:de:
         6c:ef:a3:fd:37:5f:b7:2f:02:92:24:0a:5b:cb:05:0d:54:36:
         f5:fb:9c:30:9a:3c:5c:2a:83:c3:07:e9:4e:64:52:2e:e6:44:
         b9:d6:6f:1b:41:ce:34:88:96:56:1d:5d:bd:29:54:0a:bf:5f:
         e8:a5:f3:39:c1:be:f5:d0:f0:12:b5:d7:70:c7:2d:e6:09:2f:
         21:2b:c9:91:cc:74:66:f6:f7:1b:04:89:7c:b2:cf:8b:22:32:
         4b:ee:d5:22:f7:77:7b:59:da:14:8e:72:ee:bb:df:e2:9a:1d:
         10:ba:94:3f:a4:e5:07:d2:1a:9b:e6:38:16:a5:ca:d7:54:ff:
         ed:1d:87:54:91:69:51:b7:b1:cf:9b:8e:51:50:cc:cc:dc:d7:
         56:89:27:cb:7b:39:2a:b5:cc:ec:fd:ba:03:35:65:8c:ab:af:
         8f:06:f3:bc:1c:42:b5:81:44:46:da:11:4b:58:bc:03:d6:ba:
         58:d3:72:f9:03:be:6e:ed:c0:4b:5c:45:46:b5:c8:c1:bb:27:
         f2:49:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 16:32:22 2024 by rpki-client on console-fra.rpki-client.org