Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa
File:                     2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa (raw, json)
Hash identifier:          hnUUYePgwF2K3raFpl3/UP17AELcQC4zJ+n9PvhpIQ8=
Subject key identifier:   7D:12:3E:D7:AA:36:E4:91:55:F4:94:36:42:4A:6D:24:07:A7:CC:7C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845462E1BAFBBE2BC64591E0FC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa
Signing time:             Wed 20 Mar 2024 21:05:34 +0000
ROA not before:           Wed 20 Mar 2024 21:05:34 +0000
ROA not after:            Tue 18 Jun 2024 21:05:34 +0000
asID:                     36040
IP address blocks:        208.117.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:1b:af:bb:e2:bc:64:59:1e:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 21:05:34 2024 GMT
            Not After : Jun 18 21:05:34 2024 GMT
        Subject: CN=2f97602c-186c-4813-a0d0-b3035f4c2d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:f4:e0:7f:44:69:3f:29:b7:69:54:9a:3e:
                    d1:b3:38:70:ad:91:5f:e8:72:f8:92:e4:f1:9e:e1:
                    53:5d:a5:e0:e8:cf:41:ee:d4:42:69:02:f9:94:9b:
                    78:e7:61:a9:69:6f:10:7f:69:b6:4e:0a:19:73:96:
                    38:6e:ca:e8:04:0c:67:93:0b:c2:39:e2:3e:21:4d:
                    4a:1d:fa:e8:a3:b7:2a:ef:6d:7a:e7:d5:ea:16:fe:
                    8f:80:7c:25:5a:be:ff:12:b9:13:e4:99:3c:a2:a8:
                    3a:d8:53:d4:c4:a6:c0:d7:7d:07:d2:9e:50:07:d1:
                    8a:44:03:b3:85:6c:2b:a9:f5:e2:a9:b3:43:08:75:
                    c5:ee:d3:cd:10:29:6f:9d:d8:62:3d:80:5c:54:30:
                    dd:31:56:e0:5b:d3:79:b8:af:cc:a2:d0:d3:46:c7:
                    3b:92:42:63:a8:a6:f5:27:64:c7:b2:ae:fa:53:ee:
                    a0:81:70:b6:00:92:38:14:02:d7:28:df:ff:db:19:
                    d1:45:c8:69:37:34:ca:d8:f9:a8:6d:7c:0f:da:9a:
                    56:1c:26:96:76:43:2f:a5:7f:0e:4b:38:fc:45:98:
                    f3:57:24:9d:49:cd:43:e2:da:a3:47:6e:ff:37:38:
                    3c:72:6e:7d:83:8a:be:83:f5:9a:43:f0:53:ef:c1:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:3E:D7:AA:36:E4:91:55:F4:94:36:42:4A:6D:24:07:A7:CC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:25:7b:54:0c:2b:be:1d:8d:c6:d4:86:ce:32:35:71:78:
         18:d7:91:2f:27:6c:7c:3e:60:90:2e:80:fb:47:2b:41:4a:e6:
         42:95:a3:a0:d0:4d:49:83:73:5a:0f:16:5d:93:10:11:d9:90:
         2e:aa:cb:b8:4c:d5:5d:1d:c6:3e:0f:85:24:bc:93:34:a0:da:
         c6:c0:d5:42:fd:e6:12:a4:78:09:c5:ab:24:db:bc:84:eb:ef:
         8a:66:f4:30:fb:bc:cc:be:56:81:21:54:9e:0c:68:63:65:ac:
         9b:82:d8:2b:49:2d:e3:40:05:c0:01:a1:4e:5e:9b:68:1d:b8:
         0d:af:96:b1:80:ff:88:32:05:fd:9f:32:00:69:71:20:7b:5d:
         18:90:f2:53:a7:6d:ce:5d:e0:99:d0:7e:40:f1:5c:e0:41:6e:
         b5:d9:36:15:25:b4:71:65:3c:d0:86:b3:80:c8:77:bd:40:d8:
         19:2a:2b:be:6e:cd:05:f3:ca:e2:37:e5:f3:c1:00:a1:e4:f9:
         44:26:a1:02:81:0a:33:17:c0:c3:0b:4c:a6:3f:c8:a5:53:1b:
         8d:48:b1:e2:3e:94:c9:26:8f:29:35:d5:5a:eb:43:d8:13:9b:
         d3:87:ed:35:57:ed:e1:a7:d6:b8:72:58:31:bb:77:4a:5c:74:
         bb:ef:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:22:22 2024 by rpki-client on console-ams.rpki-client.org