Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa
File:                     3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json)
Hash identifier:          /LtVuHaY1KK3D2qksa+3OTm5NphvjAeQ77It+s5vJVI=
Subject key identifier:   16:86:DD:8B:78:EF:3A:ED:8C:4D:56:77:64:65:9E:C1:CA:4D:17:5B
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858453E42AA978605702C4EFF1918
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     11090
IP address blocks:        216.152.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:aa:97:86:05:70:2c:4e:ff:19:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=b2687041-00e2-4c42-a1c4-58a5677c561f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:5a:12:be:5f:d5:55:30:f3:d3:5e:f3:ab:
                    92:30:09:6e:6a:c2:1c:6d:70:84:0d:09:dd:69:f2:
                    f4:17:7e:e2:f7:da:91:da:09:76:72:95:b3:1e:66:
                    2e:5d:ae:af:f6:6b:3b:10:1b:79:f4:64:52:04:40:
                    5c:be:f4:7e:42:7a:43:5e:25:cf:89:e4:f4:b3:b1:
                    d7:9b:92:6f:d1:08:8d:8d:66:8e:91:5e:33:3c:ef:
                    a5:c7:84:18:83:c1:75:02:29:a9:ed:b3:05:eb:4d:
                    c6:b5:23:e6:e6:2f:9a:66:2c:f4:36:08:eb:8c:56:
                    57:81:c0:8b:89:88:41:00:ef:ba:45:06:be:19:ed:
                    95:61:7d:1f:94:92:0f:a7:30:13:6f:61:6f:f5:48:
                    71:59:d1:88:7a:09:c6:b9:5a:e3:6b:13:d8:43:d3:
                    4f:47:cd:52:1e:46:7b:11:e7:e3:17:94:3f:a1:61:
                    3c:80:42:5f:00:7b:2e:38:0c:5e:fe:11:df:82:b3:
                    5c:e1:9a:c1:4b:0f:7d:cb:b5:20:d9:46:c8:6a:37:
                    9b:bd:3f:d7:e5:30:d9:53:cd:62:c0:27:86:71:a2:
                    22:e2:a5:9c:0b:bc:4c:61:fb:29:c9:d2:3c:cf:ac:
                    d1:7d:bf:ec:b9:33:91:48:1f:58:3d:4f:b9:8d:51:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:DD:8B:78:EF:3A:ED:8C:4D:56:77:64:65:9E:C1:CA:4D:17:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:13:ae:bc:f1:29:1c:b1:31:e6:6a:65:5d:d1:91:47:c2:
         84:41:1e:3f:71:6c:85:ef:01:92:76:f6:e0:c1:bd:f5:09:5f:
         73:8e:ff:fe:6e:58:ea:c2:49:bc:03:3a:47:b5:aa:04:42:37:
         55:b8:c2:cb:07:bd:d1:ef:e1:5d:46:f1:2f:ce:6e:52:f7:92:
         50:0b:38:fc:eb:33:7b:7b:8c:0a:64:aa:c0:d3:fa:ba:67:13:
         5a:a8:27:76:08:54:48:c4:08:76:23:52:99:d1:cd:c8:c0:2d:
         0d:df:0a:a1:b2:dc:d0:f1:95:d9:a6:c4:f8:03:24:a8:56:79:
         5e:92:e2:d6:65:d3:11:cd:4f:08:08:20:7d:31:2f:d6:f5:aa:
         1f:98:3d:44:64:d0:39:ad:e5:18:3f:5b:08:08:b1:4b:fb:e4:
         b7:c9:44:32:e2:ea:6e:00:30:6f:c0:0c:da:37:3c:06:cc:47:
         6a:7a:69:69:67:13:be:3a:c9:f5:d6:f4:2a:2e:d3:a2:67:57:
         01:7f:56:72:46:36:38:be:3e:8e:f6:43:af:61:61:45:bd:0b:
         f2:a4:f3:65:79:a4:03:72:12:94:f4:d1:1e:48:39:05:9c:78:
         21:7d:78:19:d2:12:8b:c8:57:53:5e:ad:bf:11:47:c0:cb:ba:
         f4:39:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org