Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa
File:                     dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa (raw, json)
Hash identifier:          ajLZiN7wUW3sFzm0kqCMw4/ufr0Ew6uLiQxyHDfeL+M=
Subject key identifier:   8D:D1:1C:9F:C1:BC:90:3A:C1:E6:FB:54:78:E4:C2:6E:A7:BE:8D:2B
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584535E29C16872E899DF8A4C590
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        66.187.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9c:16:87:2e:89:9d:f8:a4:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=7eb93c7f-3d01-421a-95a7-4e4c92d6a087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:c8:c0:e6:3b:3d:dc:43:c9:7b:a8:71:a1:
                    e5:9a:de:e1:a6:a7:41:00:77:37:66:18:7e:3c:4b:
                    03:2f:7a:b7:3e:f3:7f:36:e8:8e:2f:34:ae:8e:41:
                    42:1d:71:0b:42:92:e0:4a:5a:7d:b2:4f:b2:e5:31:
                    15:82:c9:52:58:b0:f7:d4:c9:8d:41:82:9c:f2:39:
                    bf:96:da:6d:e5:ab:ba:41:88:58:ce:e5:8a:12:eb:
                    a1:9a:45:9a:08:3b:3b:53:38:32:91:53:50:dc:99:
                    6e:44:17:a4:d7:ff:da:b6:95:dc:2f:07:43:4d:4c:
                    c1:f8:a6:eb:05:e8:0d:ed:ed:b5:67:d7:ad:f5:0c:
                    1f:48:22:9f:2c:23:5f:2b:f6:3d:12:93:83:57:cc:
                    b7:8e:6f:fc:bf:41:51:46:9e:78:5d:ce:5f:d9:6b:
                    30:aa:e7:24:9f:cd:ed:38:56:b7:3f:2a:8b:4e:c5:
                    88:f7:dd:6c:22:22:0a:73:1d:30:85:84:3c:ae:da:
                    0a:45:4f:29:4c:02:36:61:d2:dd:48:62:53:81:ab:
                    26:01:eb:09:63:ae:25:12:d3:85:83:fb:32:12:4c:
                    3c:d2:b2:64:3f:aa:3c:a3:83:54:91:50:30:f2:c8:
                    02:27:17:02:3f:e8:2a:83:d9:03:59:0a:3b:a5:cc:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D1:1C:9F:C1:BC:90:3A:C1:E6:FB:54:78:E4:C2:6E:A7:BE:8D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:f5:8f:30:c8:48:4b:40:0c:58:93:35:ad:31:e6:04:b6:
         35:84:2b:42:fd:35:c6:14:61:70:37:c0:46:7d:ce:67:c6:13:
         29:32:36:c3:5b:12:1c:53:71:f3:d8:71:4e:eb:73:a0:70:9a:
         db:57:28:9c:84:48:2e:ff:8b:6b:43:e4:79:be:3e:c4:3c:e6:
         5d:69:1c:6a:0b:14:dd:ec:5a:c4:44:15:ce:5f:11:10:aa:fe:
         d8:db:9a:32:5b:f6:74:db:e2:28:1b:23:a3:61:b3:5d:54:cb:
         87:6b:a9:62:4e:a3:8b:2c:fa:f9:ea:d1:55:70:ce:35:63:4e:
         f1:6f:32:49:f6:f7:91:08:a5:41:95:62:c5:da:b6:77:79:f5:
         a8:6a:7c:ef:c5:c2:07:59:96:f8:a1:71:bd:a6:80:4e:d5:05:
         7a:f0:10:ef:5a:aa:be:f5:b0:2d:21:f9:f1:91:7b:bd:57:4b:
         f9:bb:77:16:83:71:cc:28:d4:06:ec:4a:c4:73:ba:da:a4:96:
         d9:2e:71:7a:1e:13:01:51:ad:1b:ad:38:15:19:3c:27:ae:e9:
         23:0d:3a:3e:d4:bf:b4:f6:ff:45:be:cf:de:31:c3:f5:dc:16:
         7b:b5:4a:ec:cf:f3:44:7a:e8:2b:67:91:18:a4:23:2f:16:aa:
         b8:5b:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:33:48 2024 by rpki-client on console-fra.rpki-client.org