Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File:                     1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier:          7jh6t9IzfNMWYq4OKomYV3Yfqgyg1/fI4AuSLwtOGxU=
Subject key identifier:   10:A7:46:19:03:19:A3:19:2F:24:EF:33:87:0A:95:79:F5:19:FE:E0
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F432858456988556DDBE07F7CC53A279C
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     62533
IP address blocks:        216.68.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:55:6d:db:e0:7f:7c:c5:3a:27:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=1714d792-fd10-4c4a-b681-224b31ed4c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:c2:14:67:f9:62:c7:46:c0:21:9d:10:8b:
                    59:67:1f:ad:88:60:45:bb:03:ae:cb:10:2a:4d:1c:
                    ae:35:02:21:8f:ae:6e:17:f5:86:af:57:6d:30:74:
                    e0:a8:ae:c7:c4:0c:c4:dc:43:7b:08:e2:de:80:e9:
                    35:c2:5f:f3:90:5b:e3:7d:7a:f8:c5:7c:b3:13:93:
                    b2:36:20:45:d7:4a:78:86:19:85:c2:ea:fa:77:bf:
                    92:fa:bf:72:6f:00:fb:a9:f7:19:ad:a3:42:a0:0f:
                    ae:1d:d4:75:0b:af:b7:cf:fa:d1:46:7a:be:ae:9e:
                    e5:36:3a:68:dd:eb:68:ea:93:1a:55:7e:52:38:e9:
                    39:8d:34:43:55:31:01:8c:c3:7f:00:ce:20:93:52:
                    b7:d3:93:b5:a4:81:c2:55:4b:f8:52:8d:de:f4:19:
                    55:dc:0c:45:f4:d0:58:2d:0b:1f:e5:d4:88:9e:b6:
                    9a:2d:46:45:1d:cc:c1:66:ed:8e:b4:36:d0:86:b2:
                    16:ad:0f:9d:38:74:82:cd:b7:d9:53:51:ff:07:2c:
                    99:d4:11:5a:e3:ea:3a:16:42:08:55:c7:e7:75:8a:
                    47:3a:72:b8:24:6b:c6:0e:20:3e:65:dd:a6:46:60:
                    5f:1b:90:bc:21:6a:88:5e:4b:d3:d1:aa:d0:71:6e:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:46:19:03:19:A3:19:2F:24:EF:33:87:0A:95:79:F5:19:FE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:1b:99:30:11:70:74:b3:c7:ae:ce:28:5e:22:59:41:ef:
         9b:49:43:55:86:b9:6f:c0:90:bc:2f:a7:47:57:1b:38:f2:2a:
         1f:93:9f:41:9b:99:67:15:b4:b8:89:5c:b3:ae:99:49:f7:7a:
         da:8d:1e:c9:c8:03:d2:b1:83:00:89:c8:49:c3:e4:81:bb:dc:
         62:40:c9:b2:51:8c:16:a9:33:ba:94:45:24:4f:12:55:70:91:
         18:e4:0d:04:cc:6a:63:8b:f7:f2:4f:33:a1:af:22:81:5f:29:
         7b:b2:42:82:f3:60:fb:0c:84:70:27:95:bd:ad:1c:6a:af:b0:
         44:3f:2b:df:53:18:cc:a7:4a:b0:71:03:4a:6b:ce:07:e3:6a:
         56:2b:11:ef:68:ad:9b:50:42:78:96:3d:90:6c:63:92:88:ad:
         77:5e:8b:c7:98:2c:00:dd:c3:07:5e:45:5c:d8:5e:8c:21:ec:
         ae:9e:ef:37:4c:be:2d:c0:da:76:4f:58:43:e4:23:0f:81:2c:
         a4:52:35:92:e7:6b:47:ed:9a:ae:0e:ab:eb:2d:fd:e9:fa:b3:
         56:af:b1:c1:20:e1:0b:cd:22:95:c4:61:f4:49:04:39:fe:1b:
         2d:3a:48:85:15:8b:65:a4:a3:b9:28:a7:28:05:66:56:3b:6c:
         90:75:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org