Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa
File:                     b8c8b027-6913-3522-8a9a-416844c643d7.roa (raw, json)
Hash identifier:          4q3BNYTAkI44fP/oYW61hJK+bhBt1IGKLl9AuOG3piU=
Subject key identifier:   83:74:DA:F8:80:C1:33:21:2F:1E:06:D3:E8:33:33:28:F1:84:9D:74
Certificate issuer:       /CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Certificate serial:       010D0C9F43285844C4EFB2D82C9ADF274C9B7300
Authority key identifier: B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa
Signing time:             Sat 03 Feb 2024 14:00:30 +0000
ROA not before:           Sat 03 Feb 2024 14:00:30 +0000
ROA not after:            Fri 03 May 2024 13:00:30 +0000
asID:                     400274
IP address blocks:        192.101.47.0/24 maxlen: 24
                          2602:80d:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c4:ef:b2:d8:2c:9a:df:27:4c:9b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
        Validity
            Not Before: Feb  3 14:00:30 2024 GMT
            Not After : May  3 13:00:30 2024 GMT
        Subject: CN=e588fe7d-05c5-4a89-87e2-9b3489a1ff70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:b5:ab:d1:93:5b:b4:bc:bd:65:94:33:63:
                    ea:62:e9:ae:e9:8a:b3:a6:b5:33:ac:20:d4:ec:7d:
                    c8:b2:0c:c7:51:7d:35:26:a1:be:52:ed:87:98:b1:
                    6d:00:53:0f:a5:23:96:f6:50:14:6f:1b:75:ec:28:
                    c1:58:c6:7d:b3:bb:ef:57:a1:da:65:3e:89:80:3d:
                    98:d3:98:b9:40:3e:0f:c7:38:bf:95:a8:ff:bd:78:
                    2a:ce:23:01:f0:72:6f:03:ac:5e:45:2c:cf:04:86:
                    b6:df:45:cb:df:9b:f2:34:ae:66:36:69:4a:3b:b4:
                    ed:3b:7e:af:68:1a:c9:79:34:06:65:62:de:9c:6f:
                    c6:84:2f:cd:86:0f:51:b1:a5:37:c5:58:5e:13:d4:
                    ce:13:62:54:b4:a8:56:8f:83:9e:54:8d:b8:fa:96:
                    6f:04:27:44:52:7e:4a:cb:fe:ea:63:93:0d:21:56:
                    ec:00:c7:88:f0:0e:e7:be:4c:0c:06:5b:c8:1b:b0:
                    95:82:10:69:0b:f0:c7:e2:62:32:cc:11:27:a6:b2:
                    1a:7e:b1:be:e1:69:a5:d4:fd:8f:8a:df:67:58:4a:
                    9f:ec:ca:de:1b:b0:ce:d6:37:c7:94:22:f6:8a:77:
                    34:69:fd:cb:2d:72:6f:bf:5a:4c:a7:1e:e0:a6:c7:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:DA:F8:80:C1:33:21:2F:1E:06:D3:E8:33:33:28:F1:84:9D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/b8c8b027-6913-3522-8a9a-416844c643d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.crl

            X509v3 Authority Key Identifier:
                keyid:B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.47.0/24
                IPv6:
                  2602:80d:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:27:ae:42:27:eb:31:c1:20:20:4a:95:9f:97:f7:fc:09:
         00:c8:a3:b9:69:42:35:66:64:53:87:f8:26:ed:7d:db:ed:91:
         01:f1:28:e2:9d:bd:70:af:60:2f:da:d6:17:06:06:d7:a1:9d:
         f1:eb:a8:7a:12:72:06:d1:fe:ac:f9:5c:49:23:4a:d8:4e:41:
         0d:e7:a7:46:7d:49:78:4d:d5:d3:8e:b0:fe:79:27:30:5c:44:
         4c:7f:b7:75:8a:a5:27:88:c3:cc:57:b6:f5:78:15:8e:b1:7c:
         49:ae:cd:bb:46:65:d7:e5:9d:f3:07:29:e9:7f:bf:b9:4b:72:
         61:8c:db:ba:4b:e9:11:07:68:5d:9c:16:ac:b9:f2:26:d0:e8:
         85:e1:48:31:b5:55:31:ff:9e:93:cc:19:ba:32:2c:d4:06:be:
         db:8b:63:f6:b9:97:c2:1f:2f:57:31:62:2a:1e:05:a3:cd:6c:
         6f:83:72:88:8a:07:54:6e:56:19:1c:e7:07:11:2f:6f:0d:55:
         55:50:c5:48:3c:d1:19:39:4c:99:70:fd:0f:f9:33:c7:24:c4:
         66:44:08:c2:a3:2b:4e:bd:2d:8a:e0:3d:23:55:df:dc:72:49:
         fe:b5:58:78:84:c3:3e:bd:d7:86:4c:ce:01:22:0f:6d:f0:74:
         79:c5:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:16 2024 by rpki-client on console-fra.rpki-client.org