Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f8313326-f08d-3e1f-84c5-5bf23b6121d4.roa
File:                     f8313326-f08d-3e1f-84c5-5bf23b6121d4.roa (raw, json)
Hash identifier:          0bEemCwACP2VoinGGGMEqDtItEgyE2XH/S4DeAI/Bd8=
Subject key identifier:   83:C7:BB:60:F0:BC:0D:AB:83:7D:E6:BD:0B:73:22:41:0F:F4:A7:12
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858452D82918C57A4AE6CC2F583E0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f8313326-f08d-3e1f-84c5-5bf23b6121d4.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     61317
IP address blocks:        216.185.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:91:8c:57:a4:ae:6c:c2:f5:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=1981a2b2-ff61-4fee-8a1e-8d326b522fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:8b:09:4a:4d:c0:70:22:4a:ed:67:88:43:
                    4a:40:72:2f:d2:a8:cb:0c:bb:9d:80:6f:13:76:18:
                    c8:b4:42:2a:8c:35:8e:06:9f:09:b7:7f:c3:8f:cd:
                    b1:77:c3:28:9f:ad:7a:ea:f3:9c:fc:77:bb:02:6e:
                    bd:dc:f3:3d:15:d6:dc:a0:7e:55:e8:e8:bb:fa:ff:
                    8a:87:18:88:50:d9:9d:fc:e0:44:43:15:4d:1d:84:
                    c2:e3:95:6c:0d:c2:6e:90:a1:ef:36:da:f9:a5:e2:
                    dd:f9:57:63:b6:68:b3:3f:70:54:96:1c:93:93:8f:
                    40:b7:81:fc:7a:d7:84:95:11:b5:6c:15:54:18:56:
                    41:1e:ee:7c:12:23:55:f4:7a:42:e0:a5:7c:75:dd:
                    83:f2:5d:b2:7f:9d:34:4c:19:f3:e7:a5:3f:97:97:
                    92:92:33:3a:38:f2:b9:fe:b2:ac:2f:1c:eb:84:07:
                    d9:0d:90:4e:47:98:49:41:d7:c8:2a:b2:33:61:78:
                    13:a1:0f:cd:86:3a:40:b0:a1:4c:04:dd:d9:41:9e:
                    76:d7:18:9b:3e:59:8d:0a:68:1b:49:bb:48:83:05:
                    0f:63:15:86:ff:a7:89:b0:2f:5a:86:11:71:6a:2a:
                    8b:5b:fd:8b:b5:99:25:92:d2:09:5f:0d:dd:19:29:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:BB:60:F0:BC:0D:AB:83:7D:E6:BD:0B:73:22:41:0F:F4:A7:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f8313326-f08d-3e1f-84c5-5bf23b6121d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:ce:17:73:c5:58:23:90:04:0a:8e:85:ac:26:94:c4:9d:
         78:2f:69:84:a3:62:0a:ab:3d:6a:d8:24:98:a0:70:86:11:48:
         23:3c:ad:5e:09:15:e5:6d:eb:bd:ab:7c:e3:18:3f:41:2d:07:
         ff:c4:10:72:4a:e4:7c:e7:e2:2d:4f:31:2b:3d:e8:56:56:4e:
         89:47:e5:5a:71:05:c9:c8:87:ec:ed:80:0b:0f:7c:a4:23:0a:
         d8:d4:5e:44:75:a1:33:97:3b:f7:e6:42:f2:63:e8:0e:b2:ab:
         22:ce:d2:2b:56:e0:ff:19:48:e1:f0:84:ac:8d:af:49:2c:20:
         47:05:56:31:78:e0:1b:9a:eb:3d:04:e5:90:2f:f8:57:db:da:
         dc:fd:64:6e:32:4d:e1:1d:26:fa:dd:cd:5a:16:ea:14:3b:42:
         b0:42:ac:00:ad:36:a6:53:bd:70:12:f0:11:92:7e:ac:ba:18:
         af:36:b3:85:45:78:b4:f1:a6:bd:22:2b:6c:73:63:16:5a:e4:
         48:60:5c:16:da:07:06:20:97:8a:3c:6f:01:2f:84:f9:df:7c:
         b4:91:ed:54:88:02:73:1b:be:e0:bc:08:f0:25:af:98:00:29:
         4e:3c:6c:36:f9:f1:0b:5b:e8:28:dc:57:0b:64:02:32:ce:b9:
         d3:c7:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:28 2024 by rpki-client on console-fra.rpki-client.org