Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa
File:                     41bd168f-011b-30a0-8316-e5ea4bc22185.roa (raw, json)
Hash identifier:          t3BAJ+BI71jgZrKNVoW+LhYuzgJyhRnpN/6yJ/rOgeM=
Subject key identifier:   7B:81:C5:5A:DC:C6:65:1B:19:01:91:57:B8:54:36:8A:0E:3C:2F:CB
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285845052580B767AE6B5562824C80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     1239
IP address blocks:        216.177.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:80:b7:67:ae:6b:55:62:82:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=d33c9515-1729-4355-aaf1-6606f0954033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:b9:0a:5e:fe:91:83:07:01:0c:11:c5:9e:
                    b7:03:de:36:84:43:51:ff:56:57:8e:29:6f:5e:8a:
                    ba:0e:4a:6c:e5:9b:ac:c8:01:90:6f:8c:58:7f:ac:
                    e6:43:5a:59:e7:d4:48:fa:ef:64:91:d7:df:8c:84:
                    95:7c:b6:bc:b3:78:2d:81:19:25:e7:de:82:5e:40:
                    af:2b:ec:aa:0c:e8:2d:b9:b8:c9:12:42:33:57:54:
                    cd:98:a9:e1:ad:12:2e:85:bd:a5:6a:4c:63:f6:88:
                    3f:e3:86:0e:9c:8a:72:9d:2f:c0:64:7b:a5:97:c6:
                    a5:ac:a7:05:48:2b:b1:3d:71:f7:9e:7e:d5:25:ce:
                    60:cc:b3:9d:da:0a:fc:7a:03:b4:8b:9c:a3:d1:0a:
                    c5:d2:a8:cb:78:03:ab:8b:d3:80:51:cf:82:ae:54:
                    7e:f9:a6:bf:ab:2c:47:43:8a:59:43:62:3a:39:83:
                    14:10:73:97:e5:7a:8a:c9:c3:c3:f2:a3:76:ed:e4:
                    32:ab:47:92:74:35:92:a4:2f:61:92:a6:82:ce:4d:
                    36:cc:9a:78:3e:79:b9:ed:ad:98:a5:ee:79:95:0a:
                    fb:4e:38:e7:94:d3:69:7c:26:c3:4c:30:c2:98:7c:
                    52:94:b0:47:e9:c5:63:fe:d5:72:64:53:ec:fb:ad:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:C5:5A:DC:C6:65:1B:19:01:91:57:B8:54:36:8A:0E:3C:2F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:45:ac:28:19:2b:65:e2:bf:71:a0:0c:62:45:a7:6e:c3:
         34:0d:ce:77:1d:d7:00:da:e6:36:62:b5:fd:4b:00:e1:54:4f:
         af:88:f0:65:ac:ff:da:d4:63:b6:4a:15:25:9c:46:e6:ed:b3:
         fa:cd:fd:78:06:87:10:3a:7f:33:75:02:f3:e9:69:5d:4b:47:
         7a:e3:1a:3a:61:56:8e:4d:ed:f1:bf:7d:02:5f:72:91:83:6f:
         a6:93:87:b4:e8:70:01:ac:36:dd:d6:a1:2c:6b:56:56:bf:e3:
         f5:c8:75:30:d1:f2:18:13:86:3f:40:9a:fe:a5:ef:b3:b5:56:
         c6:68:13:e1:c5:08:8e:5e:5e:79:4d:5d:ec:4f:65:c7:72:25:
         4a:25:ef:e3:0b:7b:57:21:ca:86:b1:27:4c:29:3e:96:5f:a0:
         13:06:79:76:d2:56:5f:df:3a:41:52:d5:de:cb:5e:f3:bc:a3:
         1d:ce:4d:5d:4d:4e:9b:d9:64:01:3f:64:06:e5:cc:d9:74:19:
         2f:03:65:d9:8d:a2:11:1a:ce:70:85:be:cc:e9:bb:0d:34:f6:
         5d:bc:64:94:f8:d9:cc:09:e9:a9:4b:11:76:04:f7:43:8e:7b:
         28:5e:ed:41:b7:6b:6d:8f:04:06:1a:37:87:74:24:54:25:2c:
         01:57:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org