Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/b64ffc7e-0d5e-3708-a15e-7f0b253f9402.roa
File:                     b64ffc7e-0d5e-3708-a15e-7f0b253f9402.roa (raw, json)
Hash identifier:          6vdNgiZ1CfABFxD322gT0jlFP04Aupa9+pXd++IK3dE=
Subject key identifier:   6F:5F:1D:52:D2:13:D1:B4:14:9E:30:D8:7C:B3:FF:36:63:BB:B5:2C
Certificate issuer:       /CN=fdccefde-032f-46cb-9138-30e7726ea619
Certificate serial:       010D0C9F43285845AC8A16571BED7496A5C7C700
Authority key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/b64ffc7e-0d5e-3708-a15e-7f0b253f9402.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        205.147.80.0/24 maxlen: 24
                          2604:f700::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:16:57:1b:ed:74:96:a5:c7:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdccefde-032f-46cb-9138-30e7726ea619
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=b4f1f3f4-05d3-4f11-8f49-226d31b82989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:36:e9:1f:3d:f8:45:ec:21:bf:cf:9d:e3:
                    e0:55:bd:90:7d:b1:c0:f0:64:34:fe:4e:e7:d5:45:
                    b7:dc:2e:74:13:dc:4a:ce:aa:19:dc:67:97:2f:66:
                    e4:96:32:51:9a:cf:b0:cf:f8:74:04:97:ba:4b:2a:
                    c2:a9:30:ad:1a:a4:20:a0:bc:a6:ae:73:88:62:a0:
                    4a:30:e2:bf:d6:13:01:c5:19:de:70:92:5c:95:34:
                    c8:da:04:e9:6e:01:c4:bf:8a:02:dc:3d:a3:f1:77:
                    23:80:21:c5:00:6e:05:18:50:7c:d9:84:af:0b:31:
                    9f:d7:5d:9c:7e:9e:4b:46:8e:65:ef:02:3d:4b:f8:
                    91:58:2b:11:0c:ac:3f:27:ea:a1:31:4a:43:10:41:
                    61:a4:f8:b1:0b:1c:d2:17:19:84:dc:9e:e6:20:db:
                    74:a5:dc:d5:d5:de:fb:2e:26:fd:bb:0c:d3:b0:eb:
                    4a:ee:00:60:6e:7f:2f:85:1d:d8:b6:1a:67:4f:df:
                    5e:ea:f8:23:56:c5:d4:9e:75:31:79:12:8d:02:05:
                    0d:2e:94:5d:0c:07:35:69:75:31:78:a4:d0:8f:39:
                    d0:bc:fa:4c:39:3f:8c:e2:5f:3f:2b:ad:c9:8c:52:
                    ec:b8:02:12:3b:ef:66:35:6a:dd:cb:a3:75:34:87:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:1D:52:D2:13:D1:B4:14:9E:30:D8:7C:B3:FF:36:63:BB:B5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/b64ffc7e-0d5e-3708-a15e-7f0b253f9402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.80.0/24
                IPv6:
                  2604:f700::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:49:95:29:f8:70:b3:68:21:bc:d5:5e:5a:c4:19:e6:3e:
         65:ef:15:7b:44:19:c8:a6:56:db:b8:ce:68:8f:e7:51:5d:c0:
         b3:8b:ed:c7:fd:16:fb:ee:46:a1:1c:2e:32:21:8b:7a:eb:5c:
         ef:b3:c9:0a:5d:8b:c2:17:be:43:01:e8:20:fe:ea:e9:42:bf:
         bf:2a:9a:f6:c4:06:35:4f:d0:26:f6:16:e9:6d:fd:43:88:5c:
         42:ca:db:53:7c:d8:e4:83:71:59:04:b8:59:c9:cd:07:1f:e8:
         d5:0f:31:04:56:eb:dc:8f:78:88:a8:53:70:07:47:30:69:97:
         b6:91:0a:51:ea:d4:25:f6:d8:bf:6e:b3:27:c9:d6:33:00:7a:
         ff:33:58:90:b1:45:97:f6:c8:b6:33:cc:a3:b1:3f:57:1b:18:
         80:e5:ac:71:92:8c:78:2a:5c:bc:2f:ff:ac:21:d9:13:4e:c2:
         ab:f5:e1:6e:4b:35:cb:44:c3:36:06:1f:0a:65:6b:4a:2d:9c:
         8b:1e:57:a6:65:9d:eb:dd:a4:5b:09:7c:26:c3:15:c9:c1:fb:
         5a:2b:81:f6:53:99:e0:b8:dc:c7:36:05:cc:0f:f2:10:1d:f4:
         b2:86:72:fc:d1:3b:9b:ed:13:3e:aa:0e:52:25:7b:4d:f6:94:
         95:3b:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:59 2024 by rpki-client on console-ams.rpki-client.org