Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
File:                     3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa (raw, json)
Hash identifier:          PIoVpOdJLLPBX+5MXzmsY1v0+HbrHgTNN8SBiEb+Rk8=
Subject key identifier:   ED:76:3C:2D:C8:FD:99:58:CE:10:F0:5D:3F:7F:83:4D:20:CA:5A:3F
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F43285845AC88C431AFFA11A081A9B680
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     18780
IP address blocks:        216.71.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c4:31:af:fa:11:a0:81:a9:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f2fd9f9c-974f-4c37-8238-1e70a3eccec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:68:23:81:9c:de:73:68:95:40:df:9a:f3:
                    e0:0c:a7:c4:c6:bd:c4:53:1e:ac:df:f9:a0:f9:b0:
                    f4:6a:62:9a:06:92:ad:9b:60:0f:d0:82:36:a3:e3:
                    5e:d1:cf:0a:00:0f:32:f6:2d:38:7d:21:22:bf:78:
                    bd:97:39:a8:5e:43:ee:53:16:7b:18:53:61:1c:dc:
                    92:47:47:6f:d3:28:81:d5:1d:b1:40:b5:b0:65:f6:
                    a5:f0:6b:de:a8:e2:2e:48:99:d1:fd:a7:dd:83:bb:
                    fd:c7:64:38:a2:97:37:c9:e5:dd:34:96:b1:74:5f:
                    9a:91:78:87:3e:41:f9:cb:81:5d:1a:81:8d:c8:a8:
                    19:6f:9a:b5:5b:57:27:6d:2c:8f:64:23:54:26:c8:
                    cf:94:28:72:5b:80:27:81:fa:4f:2d:19:ae:c9:95:
                    99:27:f7:f1:6f:6e:b7:2b:a0:f1:6d:ad:3f:57:b9:
                    26:66:de:fb:5e:8c:20:c7:e2:30:28:b7:b6:65:e5:
                    85:79:3d:c7:41:1a:b6:d6:8c:51:da:03:b9:0f:24:
                    38:2a:08:63:fe:7f:7e:9f:ac:e0:6a:99:a3:89:4a:
                    c2:dd:ef:10:53:68:87:49:dd:9b:ab:09:a1:43:0a:
                    99:37:b1:b5:d6:ee:ae:89:a7:0b:1a:30:51:e8:8b:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:76:3C:2D:C8:FD:99:58:CE:10:F0:5D:3F:7F:83:4D:20:CA:5A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:33:14:df:a8:22:5e:8b:1b:d0:85:4e:47:8b:8f:aa:bd:c8:
         f7:44:bd:03:d5:9e:a4:b5:66:7d:b3:48:1a:a7:79:7d:f8:59:
         b5:58:c7:13:cf:c4:89:01:de:ba:66:9e:1e:2f:a9:86:eb:88:
         a2:ed:70:21:87:71:c9:69:22:11:a0:10:c7:4a:0d:7a:f8:1b:
         e5:b0:cb:56:5c:26:55:7e:18:09:64:9e:35:27:94:04:65:13:
         1e:30:a0:d2:e1:1b:b6:2e:67:df:d1:ab:62:10:5b:4b:41:a7:
         d6:a2:95:4b:2b:3a:32:e4:c8:b7:18:27:67:07:e1:3f:03:f1:
         a1:37:dd:f0:59:63:f6:73:60:66:cd:49:13:ae:fc:b9:b6:86:
         ba:e3:6d:67:ad:6d:bc:bc:74:63:c1:b6:ef:5f:7b:3e:a6:bd:
         86:67:35:10:09:56:67:b4:49:13:c5:e9:98:2e:23:89:de:63:
         7c:3f:e1:4c:93:2f:4f:0a:02:06:dc:f9:3e:cc:52:a5:ad:2f:
         a5:91:d1:aa:21:7d:17:6e:a2:66:2f:08:6a:16:ec:a4:cd:26:
         01:5a:22:ff:07:38:46:0b:d6:45:d6:02:df:27:13:f2:3c:16:
         ae:0a:9f:95:64:68:cc:03:7a:c3:f2:75:d6:da:f9:74:4a:b2:
         2c:04:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:20:01 2024 by rpki-client on console-ams.rpki-client.org