Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File:                     0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier:          U7ADVZWDZCZX/eBNdRD3m0raQoEJYytV0nbjiF5Cpoc=
Subject key identifier:   C7:B1:49:C3:E0:E1:AC:B2:77:7D:09:83:B3:4A:EA:39:ED:0E:46:8B
Certificate issuer:       /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial:       010D0C9F43285845131AE43ABD6D379C8071AA80
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     25661
IP address blocks:        199.119.140.0/22 maxlen: 24
                          207.167.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e4:3a:bd:6d:37:9c:80:71:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=286f8f16-89a5-441c-8ab6-3553381819a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:bb:1e:e5:db:0a:d9:b4:27:0f:03:f6:22:
                    13:22:d6:67:90:46:92:9d:eb:46:ae:0a:21:39:be:
                    e4:54:3f:36:41:d2:8c:9c:29:3d:26:94:57:97:9d:
                    31:79:58:71:52:55:1d:fb:ca:65:75:c0:4a:ab:3b:
                    6a:da:26:bb:f8:6f:68:b8:87:04:e8:1b:5d:21:82:
                    67:bc:50:ff:a7:c7:50:e5:7a:d7:54:29:4d:3f:6e:
                    59:78:dc:a7:6c:b3:36:da:ba:d8:cf:29:37:0e:c2:
                    02:ee:f6:53:70:af:af:22:05:66:9a:5c:82:74:84:
                    8d:38:f4:85:4d:d8:5d:14:ed:14:06:23:7b:76:3e:
                    f2:88:4e:7f:4c:08:29:7d:5d:99:55:4e:8a:8c:55:
                    ec:88:c4:05:2d:cf:7f:91:a7:e8:24:9d:23:d0:91:
                    90:e2:88:fd:40:02:39:f7:6f:8e:14:69:12:74:8d:
                    2d:e6:72:28:85:8e:bc:d1:35:4e:bf:e1:71:4b:db:
                    57:51:fb:76:d8:45:0b:6d:f0:8f:c8:2d:d8:3b:25:
                    b8:80:3b:e8:10:01:5d:01:71:bb:f7:c6:ff:80:a9:
                    79:0c:3c:a3:cb:ad:67:95:38:64:70:a1:1c:d4:85:
                    e5:a9:8f:d3:40:3a:08:02:1c:60:bf:d5:fa:cc:d1:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:49:C3:E0:E1:AC:B2:77:7D:09:83:B3:4A:EA:39:ED:0E:46:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.140.0/22
                  207.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:a6:e3:e4:72:cf:b7:62:0e:4c:b4:e0:37:26:47:26:52:
         8a:9a:92:07:35:07:80:87:b1:08:11:0a:3c:9e:3e:ab:87:98:
         3a:7c:2e:15:e3:bf:5a:6d:18:4a:72:ce:57:c1:cc:bf:6b:a6:
         e2:ee:d1:13:4a:80:d8:4d:cb:f9:9e:c2:fe:86:b1:80:36:4f:
         2f:d6:51:87:f5:c0:b0:c0:53:9c:85:07:9d:0a:d5:11:89:12:
         63:f3:e6:86:a9:e4:4d:7c:3b:e9:0f:81:07:44:b2:af:ee:81:
         7b:ec:92:3e:b9:9e:c2:c9:bc:e0:55:ab:38:10:0c:dc:64:c6:
         3e:7a:40:e8:f0:79:cb:8b:20:a1:3f:38:84:38:0b:e8:9e:05:
         b0:01:64:0f:b1:1f:0b:26:c6:93:71:b7:61:c9:96:eb:42:43:
         14:de:53:66:82:ee:fb:b9:e2:26:0b:89:db:6c:ec:ca:1f:28:
         24:ec:e7:84:7e:14:bc:27:ec:70:56:d8:f6:f0:67:a2:ae:49:
         f1:38:bc:0d:5b:44:a9:6f:56:b2:e6:cf:bd:0c:b9:e8:8c:0a:
         2d:35:5a:95:be:9a:68:b9:97:56:4d:e0:7f:51:be:df:74:fa:
         40:1d:29:c2:90:a2:81:9d:24:06:dd:8d:3c:b5:fb:48:96:a5:
         ea:f4:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org