Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa
File:                     d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa (raw, json)
Hash identifier:          u6gLZWe+rT71idCUYBVrH9EkBXd60jPQOf/JhHsm848=
Subject key identifier:   4A:42:76:66:D9:9D:E2:04:5E:5A:26:86:FA:55:3A:44:E3:FA:E5:E3
Certificate issuer:       /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
Certificate serial:       010D0C9F43285845280AEE782E52A03876968F00
Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     22280
IP address blocks:        209.196.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:ee:78:2e:52:a0:38:76:96:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=d908de2b-a617-45ec-8a11-68197e2a1630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:c9:48:79:90:81:14:47:28:c9:e5:9e:70:
                    30:3a:9b:d4:77:7a:61:f6:3f:65:61:c3:1c:4d:da:
                    3a:10:47:2c:44:73:12:58:17:87:3a:d6:32:7e:95:
                    60:ff:92:b6:c0:5e:70:1a:69:43:32:36:dc:81:0f:
                    37:6d:f7:0c:b4:3c:91:d6:70:e0:f8:3d:64:53:4c:
                    73:1d:a4:46:c7:40:9e:9c:e5:5f:12:c0:3a:d6:ad:
                    41:5a:90:68:81:d4:39:0e:29:b1:81:70:59:4d:9e:
                    4e:4f:63:df:cb:ac:5f:2d:46:99:35:50:eb:4f:6b:
                    c7:2f:1e:fc:33:4d:80:8e:97:f5:ad:19:b2:ef:82:
                    b1:2c:65:61:97:c1:85:6d:6a:8b:ca:df:90:fa:c6:
                    8c:3c:aa:4d:3c:60:be:21:13:8f:3b:38:d1:fa:6a:
                    7c:f4:10:ef:e6:32:b2:2a:89:85:19:5e:bc:57:ec:
                    7e:d5:03:9f:b0:f7:e0:86:f6:59:d1:7b:37:62:7e:
                    59:d5:a5:15:78:d2:7c:cb:8f:07:0c:31:15:ee:3e:
                    9a:b5:d8:a0:7a:db:74:9b:18:3d:d9:66:2d:39:78:
                    64:a3:cf:1f:fb:28:cc:67:46:08:97:9a:71:a7:47:
                    f9:3b:5f:66:c5:04:a5:15:79:1d:b5:51:99:de:ac:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:42:76:66:D9:9D:E2:04:5E:5A:26:86:FA:55:3A:44:E3:FA:E5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:9e:9a:8a:40:c1:ca:b0:03:9c:51:af:2d:6d:53:88:71:
         16:c1:fb:a5:43:99:d7:5e:21:78:5d:6e:6d:5b:d1:7f:13:38:
         7d:97:2c:32:cc:25:2b:f5:89:c9:2e:93:ae:7d:e5:c2:32:96:
         8e:01:1e:3a:19:79:c1:32:7a:1d:b5:33:e0:39:c6:2b:9e:b4:
         20:c2:93:b6:4b:07:aa:4a:0a:a9:a2:b5:09:2f:86:6f:47:46:
         a9:59:c1:b9:f7:7f:2b:0b:b1:5f:df:00:28:98:66:13:89:bd:
         d3:f2:0e:88:91:60:10:fc:6c:d4:0c:c3:b7:8a:98:d5:06:ff:
         15:15:08:86:4e:7c:23:f6:69:38:dd:44:a6:b8:c2:7d:c4:f6:
         84:ef:08:60:15:31:a9:33:7b:87:3d:36:4b:a9:c0:13:4a:21:
         28:d5:18:a5:d7:fe:2b:3c:35:24:54:9d:e2:a7:69:85:d2:d1:
         45:13:3c:85:ec:8e:85:3d:87:cd:c7:09:b5:07:af:5b:9a:f8:
         0f:87:40:3b:1c:ba:f0:b8:ea:8d:12:7d:a1:e3:c4:47:c0:75:
         fd:93:b9:d4:e9:12:55:93:37:f8:31:b7:0e:4e:04:26:b8:ab:
         20:72:18:88:4b:93:be:72:7e:f3:bb:03:21:bf:1b:ff:b0:94:
         6a:dc:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 08:34:54 2024 by rpki-client on console-ams.rpki-client.org