Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/608a559b-8547-3ba1-ad04-ac2c19b32210.roa
File:                     608a559b-8547-3ba1-ad04-ac2c19b32210.roa (raw, json)
Hash identifier:          R7mD4/Ivo2UBzoNYdvleG0upOtmA5bpLYZDm9efjhj0=
Subject key identifier:   FA:9B:19:F1:F4:1D:43:62:01:D4:DC:6B:93:A9:12:BF:C9:5A:5C:70
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D86BD9A7597F292EE75380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/608a559b-8547-3ba1-ad04-ac2c19b32210.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     13431
IP address blocks:        209.66.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6b:d9:a7:59:7f:29:2e:e7:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=bf31c00e-e930-4e99-a868-2a80279a8933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:76:1d:36:36:1c:8d:0e:33:60:25:3c:cb:
                    53:a4:a5:ac:f8:d3:e3:b9:9c:9a:00:fa:e9:f0:62:
                    95:d7:5a:a6:98:7f:10:df:0c:7a:a6:ae:50:27:5e:
                    72:b7:e0:ae:64:70:c1:66:f5:74:cd:80:e5:2c:c2:
                    bf:ca:a5:5c:69:a8:c8:ca:3c:8b:e9:b4:73:b0:a7:
                    aa:d7:e3:56:da:fe:08:d5:28:26:d4:18:d6:5f:03:
                    0a:27:15:ab:03:a8:16:ca:a4:dc:72:af:c0:8a:14:
                    d0:d6:82:91:ec:ac:7e:4c:46:7c:fe:f0:42:15:a3:
                    b2:61:34:aa:7c:06:4f:92:a0:ba:20:ab:4f:7a:98:
                    70:2d:eb:eb:00:db:a0:60:69:a9:61:db:6b:c5:35:
                    58:4f:7c:5d:85:5e:d6:6f:64:cc:bc:ec:25:97:bb:
                    65:e3:72:50:64:5b:3a:0b:35:02:23:84:e1:90:dd:
                    e2:46:72:76:27:ca:f4:a6:0e:d7:4c:05:94:c5:7d:
                    3b:5f:06:cb:86:7e:cc:37:5c:97:ff:fb:f5:bb:72:
                    e2:7c:7c:0b:47:83:41:2e:3b:15:ae:6c:6f:bb:96:
                    93:41:8c:d9:f7:76:70:1f:e6:6f:01:9f:cd:5a:6b:
                    14:53:58:b8:ba:7f:58:06:4b:50:0e:8e:83:3c:64:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:19:F1:F4:1D:43:62:01:D4:DC:6B:93:A9:12:BF:C9:5A:5C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/608a559b-8547-3ba1-ad04-ac2c19b32210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:44:28:e8:8e:64:b5:fa:56:71:2e:a5:ff:65:1f:c5:4d:05:
         51:cd:40:63:c1:7a:c0:0b:2d:ae:67:09:c2:3e:4e:c6:bc:72:
         d3:85:30:f9:bc:79:ca:f2:92:bb:35:e9:c9:8b:ed:1e:39:6d:
         fa:53:4e:c3:0a:96:1f:14:0b:2e:b0:90:d5:e8:0e:78:5a:e0:
         34:49:1c:7e:33:df:6a:58:24:88:c7:a0:a7:16:be:4b:d8:02:
         01:98:e2:e6:07:af:ea:a7:35:e8:7e:2a:58:d5:f1:db:7d:29:
         34:a9:70:cd:90:c7:34:c6:70:70:42:e5:9e:98:fa:70:12:39:
         ca:a5:d4:27:77:a7:55:4a:84:f8:94:a5:15:34:ba:28:92:7b:
         bb:63:4c:74:9e:db:87:b0:87:25:25:57:c3:0c:82:88:f7:99:
         ff:92:1b:c4:b4:fb:b3:f3:b0:e8:1e:ce:69:f6:3d:78:07:04:
         3d:a4:9c:25:a9:9e:90:38:8c:eb:bb:d0:55:d1:0c:e3:67:ab:
         cb:9d:c0:20:9f:38:5b:2f:21:94:a1:ce:28:cd:4f:5a:20:1b:
         80:0c:3a:0e:ae:8c:c6:15:33:f3:32:6f:8b:18:f5:c1:31:55:
         b8:df:79:94:73:98:b6:97:01:42:1c:63:ce:1b:bf:a9:58:74:
         f1:f0:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:45:51 2024 by rpki-client on console-ams.rpki-client.org