Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa
File:                     bf86e7f1-3074-362e-973b-72c15cbff25f.roa (raw, json)
Hash identifier:          Vip+tyxcZTyeaLMftFhxMjZ7dTMpxBqXk/nKyZmx+7Q=
Subject key identifier:   16:80:02:43:BE:DD:AE:E6:AC:E1:5E:B0:67:B5:EC:35:BF:08:E2:75
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453317E9251E451402F3E432C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     399778
IP address blocks:        208.181.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:e9:25:1e:45:14:02:f3:e4:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=f883f9aa-0cdb-426b-a1e8-a09c60a5e3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:86:7f:9f:73:c8:9a:a7:a0:d9:6f:79:69:
                    98:1e:80:8b:82:0e:3d:76:2f:09:d8:b9:a8:cb:f8:
                    c9:7a:49:e0:7a:d9:16:74:67:b9:be:12:f4:84:e6:
                    87:47:1d:29:06:64:3c:e7:8c:6d:18:38:9f:6c:e7:
                    e6:5e:db:f0:9b:f5:d1:3d:d2:90:48:9d:42:26:87:
                    0c:7b:e2:fd:a8:00:29:a8:ab:f0:c2:00:d7:d0:53:
                    99:40:7d:c5:7f:71:8d:96:81:2b:e3:d1:ee:c4:53:
                    8f:e1:39:f4:5d:65:73:7d:f3:ed:1e:ed:22:68:d9:
                    3b:d6:38:f5:f5:71:6c:5c:6d:dc:9c:78:69:99:d2:
                    ba:1f:cb:d7:b2:1e:de:35:4a:2e:59:7e:44:5e:00:
                    dc:01:f0:b0:e8:be:55:e2:97:87:f1:1b:f2:a0:bd:
                    0f:36:c6:94:ce:98:1a:5c:13:09:97:96:b6:22:7e:
                    0b:f7:1a:1b:c5:de:35:f7:ae:34:99:66:b2:75:cf:
                    ee:b9:19:00:93:97:4e:5b:97:f2:0d:23:5c:a0:b5:
                    c7:1e:2a:45:36:78:5d:8b:26:0a:f9:85:e1:2b:96:
                    20:99:af:03:48:2a:ba:b0:e4:51:df:a2:30:a8:a9:
                    f2:6d:f4:36:4e:4c:b9:03:b0:b0:8e:f2:3b:9f:27:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:02:43:BE:DD:AE:E6:AC:E1:5E:B0:67:B5:EC:35:BF:08:E2:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:9e:2a:12:75:05:60:ff:e3:d5:35:2c:5c:4f:cf:b0:c4:43:
         c8:42:77:9a:03:c4:d4:5e:fd:af:8f:f3:f0:6f:33:99:ca:8a:
         e3:87:3d:17:09:89:de:97:dc:1d:a8:80:1c:0a:4b:b7:1b:8e:
         93:fe:45:44:bb:a0:63:a6:8c:68:28:22:c4:36:22:20:e0:64:
         33:21:db:14:ee:42:a0:d8:9a:df:87:ca:cb:e5:c3:b0:f1:5e:
         b9:d0:67:eb:9a:da:0e:0c:20:01:bc:b2:74:10:0f:51:19:d6:
         7e:c7:8a:d4:e1:30:e3:dd:11:a2:58:0b:72:41:99:3d:14:17:
         90:ec:73:57:c1:c1:95:d5:24:86:b3:48:8b:81:12:1f:c6:bd:
         be:44:15:e9:27:4b:d3:41:35:61:b6:24:79:06:9b:29:a8:66:
         89:34:c6:fa:69:12:30:af:9a:bf:e7:d9:35:75:13:3b:3a:ce:
         8a:df:39:ff:e4:c4:bb:c8:d8:09:b8:2b:06:eb:ac:47:53:20:
         65:f7:3a:4d:a7:eb:9b:4d:1b:52:23:2c:8a:71:d4:77:8e:b8:
         0a:1a:96:07:45:af:1d:4a:68:3d:fa:79:c0:78:83:95:38:8e:
         1c:ee:e4:f6:49:03:dd:55:87:e8:6d:ed:f3:1a:da:5c:45:62:
         12:fd:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:28 2024 by rpki-client on console-fra.rpki-client.org