Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa
File:                     14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa (raw, json)
Hash identifier:          KBz5fY/46gz/RxsMuT9Ajwle5HeZJKjG7sN99Z8FsTw=
Subject key identifier:   FF:42:0D:71:32:B1:BD:98:3E:81:6A:9F:65:3A:1C:ED:EF:D0:8A:03
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858452D82879542A53CF92E16B180
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     21743
IP address blocks:        216.185.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:87:95:42:a5:3c:f9:2e:16:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=9d78d817-d990-4425-a7da-020d03e07717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2b:a9:d0:cf:7b:81:4f:5a:18:92:8f:a5:51:
                    b2:0f:d7:59:72:34:96:82:20:1f:77:95:6e:da:25:
                    17:71:a8:51:5a:88:ca:01:f5:02:38:53:33:a8:6d:
                    79:67:bd:09:f1:e4:ef:3b:03:f0:3d:da:18:4f:58:
                    c1:09:45:62:d8:35:46:7b:c7:9b:3f:5b:1a:a4:19:
                    5a:55:51:3f:d6:d9:77:da:43:72:2d:1a:38:0b:ec:
                    45:15:02:00:6f:5e:4f:6d:73:69:23:79:14:0d:55:
                    6e:19:63:a5:3f:34:04:57:a8:9e:50:04:cc:45:b9:
                    47:f7:e5:30:77:6b:01:8f:65:3f:d2:ef:f9:b7:9f:
                    bc:cf:75:fe:48:9b:ad:32:e0:74:19:fb:be:f8:99:
                    0f:19:fd:cf:d2:ba:32:5e:ed:16:ec:19:ba:51:e1:
                    3d:2d:20:98:b5:c1:37:50:93:ed:91:18:5c:ba:e6:
                    0f:33:9b:e0:69:a3:9a:a3:7e:46:1a:0f:55:34:4c:
                    b8:8e:9c:89:e8:65:93:58:58:df:a3:22:fa:37:0f:
                    44:bd:d0:9a:04:03:7c:ee:5d:de:da:cb:58:a5:24:
                    cd:c6:89:6f:24:a5:d0:8b:23:91:b2:7d:6a:64:61:
                    19:4a:8e:06:f0:4b:2b:01:f9:17:89:24:fb:fc:89:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:0D:71:32:B1:BD:98:3E:81:6A:9F:65:3A:1C:ED:EF:D0:8A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/14d99b8d-e9e6-3492-986a-ec3e59a13b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:5d:16:0d:ab:29:17:1f:dc:a2:7b:4a:92:ed:d6:f7:6b:
         64:57:10:18:ae:ad:30:bc:15:90:51:e9:e9:af:70:40:8c:1b:
         f7:12:12:75:9c:fa:2c:67:34:c2:bf:a0:85:86:f0:5d:f6:58:
         14:fa:16:45:83:15:2f:29:5e:79:b1:7a:bf:b6:4a:d0:e3:f6:
         83:2f:d7:02:a2:0d:25:f4:71:0d:42:54:c1:36:b6:4f:fa:a0:
         14:fb:8e:1e:cc:f3:42:c6:30:85:0e:07:c7:8e:c8:e8:33:e1:
         b0:da:82:5b:7a:63:8c:8b:17:e8:04:10:48:44:87:f3:63:cb:
         c4:1d:1e:bf:23:ed:42:66:8e:38:77:f1:69:e6:8b:76:70:a9:
         8f:4e:0d:b5:0d:7a:fb:bb:75:7d:52:81:17:dd:9d:50:46:bf:
         be:30:f1:b4:a5:21:8e:b4:81:06:51:7f:ba:51:24:a4:52:72:
         99:61:7f:ba:4e:f2:43:76:e0:d1:a0:a9:ac:4d:2a:9b:5e:fb:
         ad:a8:24:31:c2:0c:41:09:80:e3:9e:e5:c3:9c:81:2d:33:fb:
         c8:ea:43:70:ce:6b:5e:09:aa:88:f6:a1:b1:d4:8d:49:c3:fc:
         c2:1f:25:5f:7d:97:b1:c9:c2:8a:cf:4b:3b:b8:5c:60:1a:11:
         ad:04:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org