Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b37fd304-b766-3d05-b524-6f58205e7ebe.roa
File:                     b37fd304-b766-3d05-b524-6f58205e7ebe.roa (raw, json)
Hash identifier:          +7nGJfTElJshxJPXU74OJvJISkF5VzSXBsPEFuyPleY=
Subject key identifier:   9D:3F:88:5D:A3:E4:3A:BE:5E:C6:6B:3F:C4:DB:3A:D2:65:DE:A3:E2
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858458B088DA7D3BBE0BF431B0D80
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b37fd304-b766-3d05-b524-6f58205e7ebe.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     3257
IP address blocks:        216.211.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8d:a7:d3:bb:e0:bf:43:1b:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=ccf55d81-3806-4f0f-973f-336a06b32984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:e8:53:c7:d7:ba:55:d3:86:2b:fa:51:d2:
                    56:c3:0b:88:c5:1a:17:d3:a5:37:98:1f:87:0b:e0:
                    08:9f:c2:0f:62:e8:ea:e4:71:a0:59:30:2a:c0:64:
                    e5:4d:6a:58:07:a8:61:17:d7:c3:79:f7:d4:e6:ca:
                    e8:f3:17:b1:4f:32:f1:62:7e:1e:92:61:b6:01:14:
                    87:69:d6:34:a7:8e:9f:c1:8d:c3:48:85:a0:b8:5f:
                    d8:7c:61:a6:09:f1:d0:08:92:e2:4b:23:55:02:b7:
                    b8:0b:ad:a9:19:24:dc:e8:95:e9:27:fd:da:d1:79:
                    85:57:30:93:d9:cb:3e:69:a0:fc:5a:55:73:c2:1e:
                    7e:d2:8e:04:e3:26:40:43:96:da:d0:3c:8f:87:35:
                    37:76:e5:90:8f:c3:a7:f8:2b:d9:bb:d3:9a:2f:cc:
                    df:d4:4e:d5:97:17:11:f7:ed:a3:a3:80:df:8a:de:
                    78:aa:cd:4c:5a:b0:3a:83:4c:ea:c2:bc:a2:4c:82:
                    46:bf:1f:53:13:29:ab:11:74:57:54:0a:9b:11:9b:
                    95:cc:be:13:7a:28:f3:c3:1f:af:e5:8c:20:77:d5:
                    8c:25:ba:de:fe:ac:19:c3:69:a4:b1:0d:f1:8b:e2:
                    09:e1:26:d0:c9:9f:8a:d0:61:cf:f2:f1:ca:a1:de:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:88:5D:A3:E4:3A:BE:5E:C6:6B:3F:C4:DB:3A:D2:65:DE:A3:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/b37fd304-b766-3d05-b524-6f58205e7ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:20:b8:b4:25:6d:f6:02:27:20:7f:3d:c8:3d:d9:ae:a9:af:
         34:e3:21:87:3f:ac:9f:e1:fa:60:65:34:16:ae:0d:5c:bd:2e:
         fb:2b:df:cc:6d:b7:32:7c:dc:49:a1:2b:67:66:ee:34:fe:d0:
         c8:4c:25:5f:e3:ee:39:2a:c9:21:bd:88:88:2f:17:68:7e:3b:
         f1:3e:e6:cf:8a:a2:4e:fc:ef:53:3d:fd:a1:81:93:b8:8b:88:
         81:99:b4:23:5b:7f:73:07:81:81:0c:ba:ba:bf:69:76:43:2b:
         1e:be:93:31:25:25:92:00:48:7f:39:84:00:97:7e:fa:e2:d9:
         5b:49:34:79:a8:4d:a3:dc:84:da:1a:21:c1:c2:0f:c5:cc:34:
         32:54:e1:44:16:41:e3:5e:9a:04:03:bb:1b:b8:b3:0e:11:1c:
         d2:ac:c2:bb:9d:b9:da:fc:fa:78:4b:e6:ed:4f:11:93:e9:d9:
         3c:81:2a:08:34:bd:32:28:d5:4e:f6:4e:a5:74:29:80:a3:f8:
         96:94:d2:c3:3b:5b:29:e3:e6:b8:4d:31:c8:28:c0:db:02:ee:
         97:07:8d:47:8a:37:4c:52:6a:8a:de:a4:43:bc:41:a3:4a:bf:
         c8:0c:79:34:d1:a5:70:cd:06:0c:1a:f1:ea:bc:a3:07:aa:1f:
         a9:d3:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:24 2024 by rpki-client on console-fra.rpki-client.org