Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
File:                     56839789-9117-3bbe-a93a-9673ed9152fd.roa (raw, json)
Hash identifier:          bMHdtA5i4jSDhiFIxxwB7Xl5R0hStRns6TIZ0atXGKw=
Subject key identifier:   F9:E7:34:D9:D0:88:A9:55:C9:6C:96:99:9A:7E:E9:EB:1D:ED:99:F9
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858456AED96637E1186B764CA9580
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
Signing time:             Wed 03 Apr 2024 01:00:26 +0000
ROA not before:           Wed 03 Apr 2024 01:00:26 +0000
ROA not after:            Tue 02 Jul 2024 01:00:26 +0000
asID:                     25899
IP address blocks:        208.56.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:ed:96:63:7e:11:86:b7:64:ca:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr  3 01:00:26 2024 GMT
            Not After : Jul  2 01:00:26 2024 GMT
        Subject: CN=d31ff94e-d4b2-4162-9631-d90a905bcd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:16:04:ee:c7:4d:1f:1c:27:7f:af:8f:c3:
                    c4:0f:6e:f1:95:09:b3:1d:2d:d9:0d:1a:76:a4:c8:
                    54:02:3c:88:cd:dd:ca:5e:cd:ec:da:b3:1c:1c:9a:
                    df:9f:be:87:b0:1a:e4:bd:02:81:cb:42:27:2f:55:
                    39:d4:70:cc:71:3d:f7:54:79:f4:1f:07:7a:aa:47:
                    4d:40:53:95:28:27:fe:c8:27:3d:53:aa:b5:68:f4:
                    5b:15:4a:98:e2:1f:f8:da:1a:54:e9:2e:e4:6e:10:
                    86:35:a3:15:46:87:57:62:39:ca:0e:3d:5a:7b:9f:
                    85:e3:3e:b3:8d:56:2d:ac:50:3a:5b:85:1c:2f:39:
                    88:f7:2f:cd:fa:a9:13:26:a2:50:cc:49:9e:2d:d7:
                    d0:08:e4:4e:ca:08:90:0a:a4:50:de:89:02:48:73:
                    4f:eb:b8:0d:bb:33:54:e6:41:84:e0:e3:ff:25:c9:
                    bf:3a:e1:95:eb:c1:bc:49:b1:66:12:e4:1e:38:4c:
                    4d:94:3e:fe:e9:fb:ff:25:5e:7f:ec:3a:67:e3:a0:
                    a0:12:40:16:d2:e7:53:2c:91:3a:28:e0:e6:92:87:
                    82:bb:ea:28:92:48:98:0e:5c:86:05:23:10:7a:28:
                    d5:ce:3b:82:c9:ef:36:98:e0:ce:52:0a:e7:83:33:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E7:34:D9:D0:88:A9:55:C9:6C:96:99:9A:7E:E9:EB:1D:ED:99:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:b5:e1:76:aa:ca:31:15:e9:26:12:af:fb:ac:c0:ba:67:
         16:d1:f8:ab:f9:88:95:6a:0e:8a:a0:7a:22:34:3a:4f:1a:ae:
         ce:53:52:bb:93:ae:04:57:43:45:05:95:71:2a:e1:a9:1d:a5:
         c2:57:62:bc:0e:04:90:31:9b:d0:a3:69:23:39:75:76:20:ba:
         d2:65:97:b1:99:aa:45:10:fa:c0:4d:e1:55:6a:1e:56:a9:2c:
         df:e5:7e:a8:ce:00:5b:b6:24:1d:7e:a6:88:97:6c:3d:9a:6b:
         ef:3a:26:ed:84:10:36:3b:b8:ea:a1:f8:0a:8b:de:82:81:75:
         71:40:d5:af:29:b2:1a:67:d8:ea:e0:18:52:8b:28:1a:6f:66:
         07:e3:3b:71:56:03:2a:91:8b:91:5b:43:52:82:a5:20:37:db:
         51:11:09:ee:38:4b:d7:19:a1:f9:5d:b7:c0:27:25:3d:ed:ae:
         ed:aa:59:0a:d7:0e:0b:a4:11:be:46:b4:19:7e:80:70:2f:93:
         ff:81:6c:71:98:10:81:ab:e2:74:51:7d:82:47:cd:99:93:48:
         28:90:04:a4:8f:a0:af:a1:f0:39:07:f6:b5:4c:5e:d1:80:72:
         fb:32:42:b1:e3:7c:eb:3b:db:0b:3f:65:05:21:95:5a:14:26:
         5a:90:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:04:25 2024 by rpki-client on console-ams.rpki-client.org