Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa
File:                     dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json)
Hash identifier:          JnPxG7QjfsTLlvI/g5SOYX3/QvQRmdX6Nb3VTpHP+bc=
Subject key identifier:   27:71:3F:A1:F1:83:F5:A8:E2:1E:02:A9:3C:A6:0A:4C:93:16:53:7E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285844D17FBFBD3F5D7EE6FEE48580
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        216.157.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:bf:bd:3f:5d:7e:e6:fe:e4:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=6e8b079d-06e5-4744-959a-9b3df127716c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:17:de:2e:c3:ee:75:d7:14:44:10:33:e8:
                    e0:f3:37:88:a5:ca:f7:6c:9e:96:97:7c:3b:25:ba:
                    13:ad:b4:2c:39:7e:06:60:4c:71:68:c3:43:07:5d:
                    2f:86:72:63:f0:11:f1:5d:b2:f1:ab:dd:0c:85:18:
                    bd:89:de:d9:cb:a6:5c:20:be:92:60:d5:e7:8a:40:
                    8f:c3:22:b6:e1:9a:d4:1e:2d:73:de:26:60:fc:84:
                    9b:48:b4:6e:50:3e:ba:f1:06:a6:d4:e0:00:d0:79:
                    05:64:29:e6:b7:e4:00:34:79:40:37:11:7b:ac:e9:
                    f2:fd:af:bc:8f:00:f1:91:df:cc:ba:84:2a:91:9d:
                    47:cd:ae:66:d7:bb:47:33:30:80:02:ae:a5:37:f9:
                    cb:30:17:1a:a0:06:f7:52:80:b5:7f:a5:f1:03:25:
                    99:3b:41:0a:62:1e:07:3a:24:1e:23:cb:ee:a1:2b:
                    59:71:97:6d:30:fa:88:76:ed:5f:02:64:ce:25:97:
                    68:65:73:89:58:35:43:3d:30:b8:bd:d0:02:dc:2e:
                    9f:b5:47:5e:0e:e5:f7:b5:20:92:61:73:f2:1b:ef:
                    99:0b:85:ed:d1:32:f5:e7:a3:ee:39:e5:0a:86:37:
                    f1:26:6e:c3:17:50:1c:ee:b9:05:3e:7e:ba:c9:72:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:71:3F:A1:F1:83:F5:A8:E2:1E:02:A9:3C:A6:0A:4C:93:16:53:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:92:73:5f:3f:ae:f0:00:30:ea:14:2d:42:e9:a3:dd:8c:1a:
         08:fc:49:f5:7e:8e:e0:84:20:1f:97:66:7b:ba:fb:09:e7:5a:
         c5:5b:2c:4a:b4:6a:54:2d:46:5d:74:0a:4f:84:6b:0b:e4:c0:
         4d:a2:df:f2:aa:fc:ff:b3:a6:cc:02:75:06:d9:65:0b:fb:56:
         45:53:e6:ef:e2:07:c2:50:e9:dd:07:03:d7:7d:fc:3e:12:e6:
         dc:59:03:81:56:02:52:dd:6d:dd:06:53:6b:fd:fd:87:f9:8a:
         ab:57:bf:bc:6b:11:c9:44:db:f7:40:3a:fa:f1:2f:2c:d5:68:
         5b:f2:7f:95:69:da:05:bb:66:71:30:7c:11:94:f8:dd:66:53:
         98:c9:4e:7d:16:69:b9:b4:92:df:12:60:39:d9:10:b8:ee:b1:
         b4:42:85:b9:61:b6:26:10:5c:0f:7c:c2:0e:b0:f3:79:04:0c:
         dd:f5:bf:1a:9e:35:c3:fb:b6:1f:94:7a:81:32:fe:15:9a:f9:
         1a:e5:8d:4f:13:6a:ce:73:71:2a:ae:cf:99:82:e1:35:78:39:
         a1:c9:36:4f:77:a0:f3:02:77:5c:e6:ab:78:4e:c1:0b:56:bb:
         1b:de:b0:20:a8:fc:29:0a:91:b7:02:b8:1d:e8:40:43:31:03:
         c7:e0:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:15 2024 by rpki-client on console-fra.rpki-client.org