Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa
File:                     402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa (raw, json)
Hash identifier:          mxSux8uFQzS42zEXwDx+YYsO7CSMtCEUu30TU2nrEbk=
Subject key identifier:   6D:3D:34:C8:21:6C:A8:75:8A:14:FC:CA:0E:F1:40:4C:CA:98:69:A9
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285844F89558917DCE5B8AC21BAB80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     62651
IP address blocks:        216.131.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:58:91:7d:ce:5b:8a:c2:1b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=86e8c090-a6fa-4ce3-b4e5-cebc5c6c28e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:da:73:a2:f2:88:ac:d1:b9:40:ae:f6:8e:
                    87:62:e0:54:69:c9:5d:9c:97:89:24:55:50:ef:3d:
                    4b:50:d5:aa:2c:af:76:6f:31:10:13:12:c5:98:07:
                    c7:b2:bd:46:5a:f1:1a:98:11:e7:34:67:62:be:66:
                    e2:d3:59:48:92:fc:6e:d2:fa:fb:39:ef:c1:97:5f:
                    92:ec:6e:c9:bc:28:ee:5c:4e:23:9b:8b:a6:7e:2c:
                    63:5c:1c:ec:89:4c:ce:11:63:86:91:91:a5:92:52:
                    df:a2:39:8e:08:6a:6b:54:09:03:c7:83:4c:6d:36:
                    83:4b:60:ab:61:2d:0e:06:b6:ad:b1:82:ec:a3:7b:
                    a6:bd:cb:91:26:9a:ef:01:00:b9:28:99:57:73:4b:
                    d3:d7:e3:24:80:1c:df:96:98:52:15:a9:e6:33:34:
                    86:5d:e9:ec:c5:f5:f2:c2:eb:dc:8e:d7:3c:7d:75:
                    3b:a9:31:7f:22:f4:f5:e1:ce:dd:79:60:3e:4c:b3:
                    0d:11:ef:e4:4f:b8:85:34:f3:51:85:72:c1:7a:f1:
                    9f:5c:1c:ad:0b:2c:0d:db:ac:4f:ab:30:85:c4:d8:
                    c4:23:0b:c9:ac:7d:e9:49:f4:34:58:9f:3c:bb:c1:
                    4b:81:df:5d:f0:8d:95:c3:af:15:fd:7e:16:3c:fd:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:34:C8:21:6C:A8:75:8A:14:FC:CA:0E:F1:40:4C:CA:98:69:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:46:a0:c3:90:34:a3:78:17:cb:73:09:4a:42:7f:1b:01:
         56:8d:b9:85:35:cd:7f:80:38:c4:31:81:85:b6:38:82:31:9f:
         1b:6b:71:08:29:94:78:df:21:67:36:3a:72:f3:27:69:4f:8b:
         8c:1d:66:22:a8:0e:94:f7:71:6d:7b:3d:c0:99:aa:a9:ca:47:
         9a:66:65:55:fb:fb:08:a9:5c:45:c6:7d:4d:f1:70:89:27:98:
         1a:c7:8c:1a:eb:57:45:58:d1:1e:81:7e:34:d4:f6:0e:1e:bf:
         cb:62:eb:fb:55:ae:24:2f:32:5b:ae:0a:40:6d:71:a3:22:8a:
         46:20:5f:b3:4d:7e:7b:a7:60:8e:52:e7:ef:1a:3b:60:3e:12:
         fa:65:5a:49:48:6c:62:b3:09:75:e7:12:64:8a:d9:5e:af:4f:
         4c:c0:b8:0b:30:3e:b9:03:fa:8b:01:28:96:2f:11:3c:84:8c:
         6e:b8:a6:be:a9:68:0c:18:93:55:37:29:95:de:88:5f:00:b5:
         3f:98:d5:74:a3:9e:eb:93:79:f4:ce:e9:54:59:5f:35:02:09:
         b9:eb:d3:7c:7d:38:4f:00:b7:b7:90:90:30:35:2c:d9:0e:04:
         3a:ea:b2:40:be:6d:34:08:0c:37:65:76:8a:7c:3a:42:c9:53:
         57:43:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:39:12 2024 by rpki-client on console-fra.rpki-client.org