Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
File:                     10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json)
Hash identifier:          whtOOqMIumLwj4PY/W+lHmOhWXqBaqRtdUuKICDOHSU=
Subject key identifier:   F6:CE:B0:B4:71:58:F9:E9:D7:F6:0D:EA:18:36:24:E1:89:11:1E:80
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F43285845ECBE8AF6B85F387D5D4A5D80
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     3925
IP address blocks:        209.165.202.0/24 maxlen: 24
                          209.165.214.0/24 maxlen: 24
                          209.165.212.0/24 maxlen: 24
                          209.165.213.0/24 maxlen: 24
                          209.165.215.0/24 maxlen: 24
                          209.165.209.0/24 maxlen: 24
                          209.165.211.0/24 maxlen: 24
                          209.165.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:8a:f6:b8:5f:38:7d:5d:4a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=9473667f-2e2f-4701-888d-2a8c4730223d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:fc:5b:41:07:d8:e8:ff:15:8e:35:5b:3e:
                    53:5e:26:96:b4:c2:46:f2:8d:ca:59:f0:c5:fd:e2:
                    7c:a9:89:33:a5:77:00:a3:0b:ea:05:fd:af:e1:05:
                    cb:52:fa:86:61:6b:8b:1d:22:98:0b:85:e5:f8:88:
                    97:24:9a:5b:9b:7c:fc:f8:31:5b:08:bc:25:b9:04:
                    7c:5b:d7:9e:6d:21:09:a0:02:a7:b8:68:e3:56:47:
                    9d:8e:0c:0d:05:be:cc:86:21:d3:86:be:b7:68:60:
                    df:de:e7:bc:25:e7:92:8f:00:af:27:1e:5b:ae:3b:
                    3b:1b:c1:08:a1:dd:66:fd:04:6b:a3:60:2c:19:d3:
                    b1:83:60:14:9a:d0:68:9f:9c:df:cf:8f:e0:b6:f0:
                    f9:f6:29:7a:2f:7f:7a:2a:82:a9:55:fa:47:49:a8:
                    ce:2a:de:18:be:84:08:33:6c:a4:65:0b:af:e7:81:
                    4a:47:9a:93:4f:bb:98:b8:0b:42:ad:0a:f5:0b:ca:
                    6d:e5:66:85:fe:8e:e7:33:59:54:3e:62:c1:65:13:
                    a1:59:b9:22:d0:28:e2:32:f6:04:13:c5:3c:4d:9b:
                    b3:73:f4:93:ca:ee:ad:43:96:29:20:b2:43:c4:eb:
                    d5:ce:14:56:93:88:09:8b:ba:f4:e2:da:da:c0:dd:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:B0:B4:71:58:F9:E9:D7:F6:0D:EA:18:36:24:E1:89:11:1E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.201.0-209.165.202.255
                  209.165.209.0/24
                  209.165.211.0-209.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:68:ab:bb:03:77:c3:43:4d:60:99:79:4b:42:c6:8f:4a:
         ee:35:36:af:2e:ca:d1:12:e7:7e:5a:d8:dd:c5:9f:35:1c:84:
         e3:09:70:05:f9:8c:ae:52:b0:ab:1f:02:37:df:4c:35:9b:41:
         05:87:52:64:6d:ac:30:98:72:33:6f:7b:93:e1:9d:5a:e5:57:
         29:01:e1:57:e2:f8:76:13:2e:d2:f7:d9:2a:be:70:8f:0b:bb:
         6d:b6:63:28:18:7c:04:26:d3:05:a2:7f:22:7f:87:84:6a:8e:
         d8:72:70:66:70:20:3e:b1:e3:5b:9c:7e:b2:ef:c3:e7:15:b9:
         d3:b6:88:81:91:a0:09:d7:50:23:4d:7e:1b:eb:02:eb:2e:b5:
         79:95:c0:aa:01:35:11:35:c9:b2:67:a0:41:b6:64:6c:ee:f8:
         81:80:0f:c8:81:28:cf:a8:e3:e1:13:e4:e9:2c:3d:5f:b6:2f:
         7e:20:07:32:39:d7:c1:fd:fa:6b:59:51:f2:b1:6a:80:34:30:
         9f:cc:ab:b6:36:1f:3d:b2:5a:95:0f:f3:15:f4:64:2f:16:aa:
         d9:32:15:b9:38:cd:ee:b1:8a:ec:b1:a9:ae:c9:94:af:8f:d6:
         65:f5:20:12:ad:57:1a:3a:c3:b8:a6:de:e2:e2:10:46:8c:78:
         4c:7d:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 06:43:20 2024 by rpki-client on console-fra.rpki-client.org