Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
File:                     14cab7a4-9592-3724-82d8-0c2cba745ca8.roa (raw, json)
Hash identifier:          JVbKqfJXYtkiXqO/hkflV4Cnrtcsio5pugFCOjf5LPk=
Subject key identifier:   D3:73:77:2C:FC:67:00:82:C4:FA:CD:B3:82:A0:2A:92:08:EB:E0:C1
Certificate issuer:       /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial:       010D0C9F43285845A428D4E48DF113877F811180
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     19318
IP address blocks:        216.219.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d4:e4:8d:f1:13:87:7f:81:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=e2c04c22-97dc-4bad-93d3-e3e2113714d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:24:90:d9:6e:55:50:d1:a7:6e:0a:3e:65:
                    59:dc:ae:5d:04:14:d5:d0:41:c9:36:76:be:7b:f1:
                    38:59:e9:e8:81:87:ab:9f:8d:f0:c2:5f:ab:2d:eb:
                    3f:19:be:4e:cc:e2:9a:8d:4a:9e:75:fc:73:a4:41:
                    d2:b3:e4:c2:fb:7b:74:36:50:47:f7:aa:d2:9c:6e:
                    bb:c6:e0:a2:7c:56:eb:72:66:10:55:bc:4e:a6:e9:
                    bf:ac:20:ea:28:6b:1d:2c:50:50:67:e3:f1:d0:82:
                    23:90:65:67:07:16:41:67:c7:83:ab:d5:0b:88:ab:
                    30:d8:46:c5:f9:85:9c:d8:46:11:40:9e:ac:52:be:
                    dc:c5:70:ed:36:f9:10:a7:c5:a0:d1:d7:f2:3a:96:
                    29:37:12:cf:96:26:43:48:03:61:74:e1:bd:7f:20:
                    24:75:98:9f:12:d5:f4:97:d5:d7:94:64:cd:b0:10:
                    d1:4e:d1:99:2b:a7:8f:56:2e:55:18:c3:88:77:e1:
                    7d:eb:08:84:a8:33:a0:6f:01:15:8d:88:7e:4a:93:
                    79:ac:96:51:13:ee:81:4a:9b:73:36:2c:e6:2d:0b:
                    a2:7a:27:dc:08:c4:ee:d7:9e:0b:ce:61:b8:8b:97:
                    4c:42:a6:8a:8a:1d:87:34:c9:6f:34:a5:1c:31:04:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:77:2C:FC:67:00:82:C4:FA:CD:B3:82:A0:2A:92:08:EB:E0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl

            X509v3 Authority Key Identifier:
                keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:a1:0d:5d:4a:8b:23:b8:d3:ed:73:91:8d:32:a1:35:a1:
         56:88:c7:62:47:1a:4c:f0:76:14:f7:81:69:8e:9d:96:da:b0:
         44:cd:99:d3:d5:07:4b:22:d2:8b:48:f4:cd:79:d9:c3:31:87:
         58:f8:2a:b0:80:be:e6:5d:be:52:0d:64:42:0a:33:d1:0d:fd:
         45:c1:09:04:c1:0f:73:8d:66:a5:dd:a2:42:f9:ca:cb:8f:12:
         94:42:4b:e1:7f:42:11:5e:38:ec:f1:50:c1:ac:7b:dc:9a:97:
         fb:9a:db:75:60:fe:2f:c0:13:b5:61:98:97:e5:b4:c5:99:8c:
         cb:71:5d:49:76:79:68:ae:99:62:f8:e9:04:db:c2:c1:73:02:
         6f:5c:c3:ce:0a:58:eb:10:8b:53:f1:19:1c:0f:d8:a1:48:dd:
         2f:ee:e5:fd:ce:1f:25:db:83:c3:ab:89:47:84:a2:57:83:50:
         18:25:50:bb:fa:ce:a1:14:37:76:75:f4:34:74:ab:34:79:c5:
         28:a1:bc:f1:5b:8b:1e:61:d5:20:b0:3a:2f:e9:ed:71:f9:39:
         28:d5:33:6b:4a:e6:09:ce:47:bb:29:91:1a:b2:5d:94:92:5f:
         cb:98:e7:34:bc:31:a0:1c:f5:63:3a:34:2e:cb:7f:a5:44:b3:
         41:45:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org