Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad25fc1a-8d15-3107-a995-2a918daa04a1.roa
File:                     ad25fc1a-8d15-3107-a995-2a918daa04a1.roa (raw, json)
Hash identifier:          JB85ODd5KXvx3xokV+e52QoSNTTN5S2VKnhbSqIzrTs=
Subject key identifier:   EA:13:89:6F:25:81:5A:71:66:C5:51:94:EE:F6:77:5A:CF:BF:24:18
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D87643AF96017EE0B11640
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad25fc1a-8d15-3107-a995-2a918daa04a1.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     395466
IP address blocks:        216.166.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:76:43:af:96:01:7e:e0:b1:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=4de3006d-e670-42ba-b17a-9a93941404c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:57:8d:41:7a:87:56:24:eb:d9:73:50:6f:
                    24:1a:23:37:47:da:9d:c9:27:ae:4b:44:59:74:e4:
                    8b:80:aa:88:e1:b3:a7:79:c5:27:e4:23:8d:a3:c4:
                    1a:16:f3:b1:89:7e:b7:83:e0:45:5b:0f:14:61:c7:
                    db:6b:14:66:16:83:ed:25:50:c5:c5:36:0f:5a:8d:
                    cb:f4:a8:5c:62:48:ec:a5:25:86:35:31:a1:f9:9d:
                    2f:6e:8f:5c:ab:29:69:19:ab:fe:57:0c:d1:1d:4c:
                    c6:7e:7f:29:b4:97:8a:6b:b1:33:32:78:1e:0e:a7:
                    d9:de:8e:e2:40:81:ae:0e:80:32:69:21:28:c2:7f:
                    6e:93:c6:67:7d:30:55:b2:f7:10:fe:51:37:ef:78:
                    07:92:e6:34:cb:7a:c2:88:29:71:ee:23:f0:73:44:
                    4b:ee:74:73:b8:21:fb:33:21:08:bf:26:3f:b6:1a:
                    ae:7d:46:56:3f:d1:df:7e:ea:11:7b:c7:32:15:5a:
                    6c:30:40:bb:36:ed:5c:bc:6b:03:5c:e8:65:0e:06:
                    aa:24:f1:37:3e:d3:b1:71:da:0b:40:62:0a:11:f5:
                    85:03:78:c8:29:3a:a0:a8:40:3c:06:bd:74:19:d4:
                    e0:49:6e:e2:3b:0d:3d:06:c8:81:5e:c9:a8:24:23:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:13:89:6F:25:81:5A:71:66:C5:51:94:EE:F6:77:5A:CF:BF:24:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad25fc1a-8d15-3107-a995-2a918daa04a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.166.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:37:f0:f2:21:72:93:d5:b4:7a:4d:14:36:27:c5:4f:c1:cf:
         d2:b1:45:46:6c:f6:d6:3d:b7:ad:fa:87:ab:78:9d:6d:03:06:
         e2:f2:72:62:b2:7a:76:3b:ed:f3:a4:6b:25:2c:08:3d:be:e5:
         50:15:26:db:9d:f2:91:ff:bc:07:46:53:e9:ce:f5:b1:c7:ef:
         ab:42:e6:24:33:3a:5b:1f:db:1b:88:b5:3c:85:85:11:d4:2d:
         73:ab:14:f0:53:bb:d7:27:df:f1:62:c4:90:1a:00:03:21:f8:
         7f:9b:7a:1a:14:6c:74:d6:10:0b:b5:18:84:df:cf:4e:6e:99:
         57:7a:54:89:0b:b1:8c:a2:87:5d:e7:70:d4:9e:28:65:63:f8:
         81:99:06:fa:bb:72:ff:9d:2d:ed:44:95:fa:64:75:1c:63:27:
         f5:26:24:b2:3f:88:77:8d:ef:20:7b:54:3b:33:48:cf:f3:34:
         29:20:2f:f7:d8:c1:fb:e1:04:77:29:41:75:3a:e9:74:a3:1f:
         64:98:e9:4f:ac:16:24:fa:b0:63:5f:8e:2f:aa:b8:e9:79:5b:
         0d:49:d9:9e:78:c4:b3:b4:1a:7d:f6:2f:45:ab:4f:d7:2b:15:
         b1:7b:ca:25:2b:49:8f:d7:1a:e3:2d:2f:b2:4a:82:78:01:bc:
         86:f7:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org