Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a540cd6-471c-3bfc-b997-637c0a2803de.roa
File:                     4a540cd6-471c-3bfc-b997-637c0a2803de.roa (raw, json)
Hash identifier:          bGSRhBaNTGx/EBky9osTdoHXrGAOYzl7wvtKdRr+HJ8=
Subject key identifier:   F0:C9:2E:9D:DD:5A:D4:5A:CD:74:E4:A8:5B:F7:FE:F8:02:1B:86:F5
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285845280AFAF097E8A2B82F7A8480
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a540cd6-471c-3bfc-b997-637c0a2803de.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     46261
IP address blocks:        216.158.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:fa:f0:97:e8:a2:b8:2f:7a:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=8a71a523-9f57-4c27-a11c-d5f5fe60ad4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:44:46:8d:f5:38:50:ac:7e:03:0f:90:44:
                    43:78:36:c2:42:b7:aa:53:01:4a:97:e7:b9:e9:2e:
                    24:ad:88:aa:19:c4:0f:45:2b:1c:b2:5e:6d:67:a7:
                    4d:59:3d:ca:b0:23:73:ad:29:af:dd:1c:f0:67:19:
                    e1:8d:d2:e7:27:d1:1b:22:87:0d:fd:1e:a1:e7:96:
                    2b:d6:06:e6:07:71:70:3f:12:19:cf:64:6a:05:fc:
                    8b:71:e6:ba:28:20:b7:9e:20:8e:49:1f:be:67:40:
                    02:f3:5b:cd:0e:85:a2:6e:4e:e3:60:ff:9c:9e:a0:
                    b4:82:17:ae:27:82:58:25:25:47:d9:5f:ee:43:29:
                    7c:c7:7f:4e:65:83:91:07:f0:f7:a1:fb:2b:1c:e8:
                    aa:70:29:29:d6:89:29:07:d7:bd:e9:2d:37:29:bc:
                    e1:36:c2:1a:29:03:87:a7:30:bd:2a:1b:6d:8c:5c:
                    e0:79:f4:91:3f:e1:5f:c8:70:8a:2f:55:93:ab:70:
                    70:14:8d:a3:3c:40:47:50:eb:26:22:52:52:95:97:
                    65:15:c7:53:91:8c:67:3c:d5:62:4d:3c:29:64:68:
                    d7:c2:d2:d4:49:26:4a:45:d8:5d:42:b5:20:26:48:
                    45:16:0f:d5:a6:cc:49:77:8b:e8:8a:ab:5a:59:66:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:2E:9D:DD:5A:D4:5A:CD:74:E4:A8:5B:F7:FE:F8:02:1B:86:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a540cd6-471c-3bfc-b997-637c0a2803de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:9c:06:73:e3:00:85:17:c8:3d:fa:3f:db:c7:ec:6f:a4:
         49:d9:06:ed:b0:f0:7c:75:9d:ab:10:fd:2b:c7:0f:2e:de:b7:
         24:90:26:f9:af:bc:5e:98:a5:62:f8:60:ac:17:3e:d5:51:19:
         3e:15:82:36:5b:66:25:4e:b1:64:51:4a:99:d5:ee:37:c3:9c:
         3d:a2:68:2a:1b:5e:a6:a3:55:fb:49:33:79:9a:89:a1:5f:69:
         72:76:b2:a3:d5:bf:0a:73:31:0f:80:d2:62:f5:68:18:38:48:
         40:08:bb:8a:ab:f3:ed:4a:88:11:cd:94:cc:26:97:2a:8d:a8:
         c7:b6:d6:12:c1:fd:bc:66:fb:80:7e:d9:af:1e:28:0e:fc:e3:
         d2:e7:ce:09:b7:85:f4:fc:d9:de:8e:cc:4f:d2:55:ea:c5:5d:
         3e:99:77:f3:de:b0:98:61:99:bb:58:01:bc:e5:db:a7:9b:56:
         bb:e9:3a:12:63:95:7a:0f:e9:8b:ec:5b:5b:f8:6c:a9:71:a9:
         4f:dd:d2:5f:5b:80:ca:42:8c:25:62:53:59:03:13:98:44:c5:
         71:f8:80:93:bf:93:ea:9a:e6:3b:ac:5c:f8:70:2d:2c:7e:5e:
         40:49:57:c1:c7:29:83:a4:b4:93:ac:01:eb:ba:13:de:94:2d:
         1c:57:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:50:29 2024 by rpki-client on console-fra.rpki-client.org