Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa
File:                     bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa (raw, json)
Hash identifier:          JfDllzdyOOFck3NKGUuX67ajd5AhTn2CswoLX8QaUyQ=
Subject key identifier:   85:A4:50:BF:72:91:C9:DB:B7:67:D9:32:71:26:7E:01:1C:05:A5:03
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584543D800030781B80355A2CB80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     212238
IP address blocks:        216.185.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d8:00:03:07:81:b8:03:55:a2:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=d17efc32-e805-4262-9f5b-976ccb1ab32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:8a:e1:7f:d9:7e:9a:6f:56:73:6c:e4:b5:
                    01:11:f9:80:94:57:68:41:33:7b:b6:88:38:9b:a8:
                    95:f6:09:7a:67:f5:88:64:40:2a:57:aa:c8:b8:e4:
                    39:22:78:79:79:1b:0b:a8:6d:71:1b:cd:6b:80:f4:
                    60:b8:24:9d:fd:ca:cd:16:0f:af:60:d0:5d:c1:2c:
                    78:73:66:93:ff:a6:c7:88:7e:a5:8d:b0:1f:9a:25:
                    14:f0:34:2b:ac:f8:0f:15:05:61:3b:d4:1f:4a:bc:
                    54:57:cf:d4:35:aa:73:eb:ff:de:fc:6c:ab:fc:b3:
                    2f:3f:ac:73:90:ab:1a:1c:d2:90:92:29:92:b3:76:
                    5e:36:cb:7b:39:b9:82:4d:ac:4f:9a:69:50:82:07:
                    72:77:9f:81:02:67:a5:1b:a6:c8:f8:8b:eb:07:53:
                    66:fa:eb:51:2f:8f:52:2a:66:aa:a0:c7:14:d2:c2:
                    cf:a0:68:e9:a7:72:50:e0:4d:cb:f9:ce:20:ad:e8:
                    fc:a6:a9:ee:f5:89:99:66:9c:cd:de:d7:ca:26:c3:
                    12:59:27:b6:9c:5b:06:51:22:f9:70:9c:eb:78:8e:
                    1b:e9:b7:04:95:32:e2:6d:4b:60:07:25:36:6e:9a:
                    ac:8d:7a:30:ad:b9:25:5a:af:e0:ee:3e:06:5c:9e:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A4:50:BF:72:91:C9:DB:B7:67:D9:32:71:26:7E:01:1C:05:A5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:29:8c:c0:2f:be:70:27:59:2d:a0:b4:0d:61:22:f7:0a:4e:
         0d:82:a7:0e:25:63:d1:43:52:dd:3c:3d:ba:13:f3:5d:63:0d:
         ea:f9:ae:52:0f:45:e0:d3:d8:bb:79:11:6a:dd:8d:d2:34:c3:
         13:2a:45:5a:37:a0:3b:68:7b:3e:e1:77:45:5e:0f:1a:5a:4d:
         0e:68:f9:87:10:4e:09:af:88:36:51:65:6d:dc:00:3b:cd:ee:
         9f:3c:41:1b:56:17:f8:43:a1:2d:b2:23:8d:8e:91:38:f4:06:
         18:f1:bb:a3:8b:c4:67:c8:2b:28:3a:87:e4:88:1a:4c:3c:c2:
         a2:5b:19:56:69:c0:9d:9f:0e:25:94:e3:63:96:32:26:52:40:
         16:ef:e3:18:23:23:42:69:b4:65:26:ae:37:8a:92:80:41:03:
         37:da:d9:a1:92:b0:df:05:29:56:69:d3:9f:b7:5a:3c:f9:db:
         00:25:c5:cb:17:7a:8a:4d:58:59:d9:11:7c:62:60:cc:a0:05:
         79:99:be:2b:e9:69:e6:cb:2a:93:76:f6:19:45:ea:27:4e:6d:
         c2:47:34:d3:ee:51:2d:f9:b8:f6:3c:93:6b:ef:fd:96:b4:1a:
         42:6d:0b:2a:d4:de:1c:e6:d2:e6:d3:4b:32:9f:4a:92:c7:f2:
         3d:d6:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:40:09 2024 by rpki-client on console-ams.rpki-client.org