Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
File:                     4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa (raw, json)
Hash identifier:          3GgjIU4MVW51c3sCT9390ESO3/09ue4T/yynY5s3UWg=
Subject key identifier:   7C:71:01:89:34:95:C2:EE:1C:C0:00:84:2A:39:C1:DF:E7:DF:06:8A
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858459633540FDC2F9AA07D121400
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        216.158.220.0/24 maxlen: 24
                          216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:54:0f:dc:2f:9a:a0:7d:12:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=13aeab58-e53f-4c30-a8e9-4e89a2422934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:d8:5e:6b:8a:36:af:0c:f2:bb:02:16:b4:
                    84:11:b0:6d:aa:c5:7e:36:af:bc:8b:82:6d:e4:bd:
                    37:86:01:db:b2:ea:08:11:2a:be:d8:0e:8c:f4:ad:
                    eb:fa:d3:72:26:c7:91:17:bf:56:8e:38:04:e5:0a:
                    43:05:ca:f4:de:12:48:fc:b9:cf:53:03:b4:65:2b:
                    61:f8:7f:0d:38:82:0a:23:c3:6a:0f:5b:75:9c:70:
                    cf:e2:27:af:ef:58:61:da:bf:b6:df:60:71:e8:da:
                    a7:fa:14:d8:b2:e4:6a:9e:b0:a7:e6:c2:b0:99:23:
                    74:65:b0:8b:05:1a:66:8b:18:fe:2b:83:83:95:0a:
                    09:0b:28:25:f9:d8:89:f6:8d:4f:eb:ff:ec:db:8d:
                    97:65:3f:95:32:ef:97:4a:16:cd:c9:46:e7:49:11:
                    c8:cd:1c:e8:80:ec:67:6f:3c:e0:01:37:af:a1:05:
                    e3:a2:9f:94:d5:11:b7:27:0b:95:a1:ba:17:8e:f8:
                    6e:d2:7b:03:9d:3e:50:49:b4:97:49:81:e1:6e:36:
                    92:4a:61:54:e7:73:4d:8a:7a:10:d8:e7:43:6a:37:
                    96:ea:af:49:13:07:e6:f0:65:ce:56:84:0c:e6:17:
                    2c:49:ad:c0:8c:24:e3:db:5d:ff:54:63:ae:dd:e0:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:01:89:34:95:C2:EE:1C:C0:00:84:2A:39:C1:DF:E7:DF:06:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:24:2b:c5:91:38:51:6b:df:48:4f:c4:3a:1b:76:94:f3:
         25:54:86:d3:ae:ee:54:a3:48:31:67:c8:ac:4e:9e:4a:f6:67:
         40:54:96:97:f2:04:a7:16:f4:c5:23:45:ae:6f:de:5f:52:1f:
         23:65:e2:a5:37:14:5f:5b:4b:8e:df:9d:09:d1:db:da:f5:8b:
         8b:0a:51:e3:6a:6b:57:cc:dc:7d:3f:8f:ad:8e:a0:63:8e:27:
         a9:82:32:9a:c8:44:34:bd:80:7f:d2:b6:52:e0:11:d1:f7:24:
         73:30:36:91:27:57:67:a2:0f:4f:03:91:cc:c5:01:08:94:f0:
         99:0b:bb:f7:1f:4a:9d:b2:c0:3d:0c:d1:95:ae:65:fa:b1:73:
         7a:bf:b1:fb:e0:47:53:88:f2:b2:65:61:43:fe:19:1b:0d:79:
         5c:d1:49:c0:74:9e:74:09:4a:e4:9d:8e:34:4b:01:eb:bb:2b:
         16:d3:0b:06:3c:89:a9:f8:a0:63:24:f0:99:7f:1b:3d:6c:15:
         ee:72:a9:d2:d8:94:8a:92:58:60:d6:46:b3:45:e5:e7:ea:4e:
         88:f6:6c:50:b8:57:34:22:24:32:e1:13:e4:19:cf:79:fe:42:
         1c:1e:80:52:42:a6:e1:28:f2:c5:93:5c:4b:57:f8:6a:36:66:
         69:c7:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:57:32 2024 by rpki-client on console-fra.rpki-client.org