Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa
File:                     6dd89af2-4338-3c2c-9998-029f692eee16.roa (raw, json)
Hash identifier:          H13L2cs85MlcYjqmWlVVjKMfaQH88p6abZMChPeee+4=
Subject key identifier:   F8:F3:99:B3:42:B9:CC:2D:77:31:C3:14:45:18:CC:EE:34:38:F2:AE
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584558C843B4370EAE838FC99780
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     212335
IP address blocks:        216.177.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:43:b4:37:0e:ae:83:8f:c9:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=661be034-e216-4522-b64e-7968147808f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:63:99:09:bf:b7:55:58:20:05:ae:de:2f:50:
                    77:8a:84:dd:23:db:bf:29:5f:3d:c7:8f:48:03:f9:
                    25:ae:8b:24:84:ad:15:1e:52:ac:e1:23:aa:74:3c:
                    7f:9b:58:2f:73:0e:5d:23:ae:4f:37:7c:a6:28:43:
                    77:5a:81:03:a3:77:e8:10:7b:e7:d5:6d:b1:51:69:
                    da:ec:24:49:44:0f:12:31:f0:54:57:91:13:fd:0b:
                    b5:10:ca:82:c4:56:d6:38:03:db:8f:27:1a:3e:d7:
                    99:0d:0f:68:27:dc:5d:27:f5:61:4e:fe:93:db:01:
                    60:6f:52:5e:d7:17:38:7d:5d:bb:f3:86:5a:de:7a:
                    a5:c7:d0:9a:3c:bf:52:7f:12:b5:c3:fa:bb:51:1c:
                    d8:a1:e5:34:02:3a:25:74:7a:3f:00:dc:84:f8:c4:
                    b5:de:9f:27:d7:aa:d5:ed:a6:64:32:d0:2d:a8:dc:
                    0b:53:5d:27:d8:0a:03:d8:84:47:f1:ea:c7:e3:5f:
                    c2:8b:ac:e2:89:d7:9e:9d:05:02:9a:b5:77:46:f7:
                    1f:25:84:32:95:62:10:af:53:6c:3d:97:ab:b5:16:
                    00:6f:fa:71:c2:8e:f3:33:2a:6b:2d:d6:70:c8:8d:
                    09:73:c4:9e:8d:7a:ec:3f:a0:1e:c9:14:79:2e:f4:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:99:B3:42:B9:CC:2D:77:31:C3:14:45:18:CC:EE:34:38:F2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:57:27:cd:8f:ae:7e:e3:d1:82:1b:e6:15:1d:c5:9f:84:a2:
         e9:0e:b0:3a:92:98:c4:18:36:6f:6e:ac:f9:0e:74:24:e3:04:
         59:18:b0:1c:71:dc:2e:55:23:44:68:54:98:7c:9e:46:db:aa:
         17:cb:99:e5:6d:8c:e3:11:06:9b:7d:76:c7:39:f7:3c:df:71:
         5f:28:19:f9:8f:96:95:33:2f:4b:9a:15:e5:81:ff:fb:29:47:
         7d:ee:21:80:0a:49:6c:7e:63:5b:7d:1f:8f:73:77:f2:9e:c0:
         cf:22:bd:66:3a:54:46:c5:26:ed:00:c4:31:6b:77:8c:2b:33:
         28:09:ee:1b:78:65:38:06:96:43:79:5d:98:a9:ce:0b:b1:44:
         31:a8:ab:9b:27:12:f5:39:8e:d1:15:80:c7:cc:19:bc:8a:9f:
         a9:39:c2:d7:13:02:96:97:29:df:92:55:11:18:0f:18:8a:3f:
         e7:70:9e:cf:52:3c:73:34:ef:74:f8:36:7c:51:9b:82:9b:fa:
         71:03:a2:a3:50:4a:09:bf:11:62:a2:f4:14:d0:f5:a8:f7:bb:
         bf:e2:22:90:d9:99:14:4d:29:92:e7:7d:38:d0:43:7f:ab:3d:
         39:c9:25:0b:c3:5f:e4:34:9c:61:fc:38:31:93:c4:bf:04:b8:
         10:ba:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org