Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2da4bc83-34aa-3af5-8b66-a55b386cdc9a.roa
File:                     2da4bc83-34aa-3af5-8b66-a55b386cdc9a.roa (raw, json)
Hash identifier:          8NPSGfXUCFXG9QnEZvc9LZyDxG2t6EPZvgQ7gePPDXQ=
Subject key identifier:   31:29:AD:BE:5E:B2:06:41:A5:69:52:07:EF:47:88:02:59:EB:95:C3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285844FD2162BE101E36ADF63503E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2da4bc83-34aa-3af5-8b66-a55b386cdc9a.roa
Signing time:             Fri 23 Feb 2024 17:05:55 +0000
ROA not before:           Fri 23 Feb 2024 17:05:55 +0000
ROA not after:            Thu 23 May 2024 16:05:55 +0000
asID:                     203963
IP address blocks:        216.24.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fd:21:62:be:10:1e:36:ad:f6:35:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 23 17:05:55 2024 GMT
            Not After : May 23 16:05:55 2024 GMT
        Subject: CN=dede4552-962f-430c-81ff-5c800e9eaa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:4e:7e:3d:e8:d8:a9:d5:e0:75:bd:ce:e7:
                    5b:0f:55:a2:c9:58:33:cf:8b:37:db:3b:95:78:22:
                    db:32:7f:79:97:b9:19:ca:0f:8f:30:30:71:54:e8:
                    e1:24:61:90:e3:86:26:3c:81:4f:4a:b8:ed:ce:02:
                    d4:6f:da:da:36:d9:08:55:a4:c7:ca:95:99:cd:dc:
                    10:62:c8:29:06:2c:25:83:03:af:d1:e3:63:50:a4:
                    e5:64:5f:bc:bd:8f:9e:cb:20:1a:7e:ed:4c:56:50:
                    83:95:49:2d:3a:98:de:ad:ee:af:3d:8c:41:7f:9a:
                    61:ef:c3:98:cb:2b:92:a1:4d:21:4d:55:6e:f5:3e:
                    c7:b2:4e:3c:7f:e4:8b:35:68:6f:7e:bf:a3:d3:ec:
                    30:ad:53:cc:64:5e:4c:31:50:44:cb:a7:89:0b:d5:
                    3d:21:a0:2b:91:41:2b:08:fe:e7:2d:9a:94:4c:ad:
                    4d:2e:ae:4f:99:1f:a0:15:0b:e8:3a:23:2c:9a:ae:
                    7f:56:ac:a0:2c:8b:d2:79:70:b8:b9:0a:33:79:cf:
                    92:14:6d:a4:cd:ef:35:3f:2b:1b:29:45:a7:4c:b1:
                    3d:96:11:1e:4d:5f:3b:a6:e4:85:2a:ba:9e:e3:db:
                    ae:05:30:72:e6:31:29:c4:b6:3a:92:56:b8:e3:a0:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:AD:BE:5E:B2:06:41:A5:69:52:07:EF:47:88:02:59:EB:95:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2da4bc83-34aa-3af5-8b66-a55b386cdc9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:56:9d:f3:7e:6f:5b:2c:78:64:16:ee:64:4f:84:c2:5c:89:
         fe:a3:1c:b3:9f:ae:01:1e:2f:15:6b:24:34:3c:05:b4:c4:91:
         bd:12:63:a0:48:0e:d4:11:aa:01:87:82:32:25:e4:a1:57:e6:
         9d:5f:4e:1d:6f:99:e1:0a:ab:d8:95:84:18:63:b5:57:99:a1:
         19:fb:b9:1c:b1:f9:a4:da:d8:dd:db:ad:da:e7:98:1e:39:6b:
         85:a6:f1:18:f0:46:a3:aa:1f:0a:e8:00:3e:8b:0c:48:00:d2:
         98:f9:57:67:12:95:4e:cb:90:ac:d5:c6:9b:c0:47:64:31:7c:
         74:e9:30:26:04:17:4e:4f:d1:a4:0b:d9:e4:59:fa:29:ac:a3:
         d8:1e:84:5a:77:26:c3:02:90:16:79:59:68:3b:24:bb:2d:a5:
         43:c1:5c:33:af:b0:f9:0a:c1:aa:92:e3:fb:e4:2b:d3:04:9f:
         49:03:d3:b1:2b:b5:37:e9:46:cc:e6:6f:21:1e:fc:76:e7:1e:
         40:d7:58:27:91:d1:73:c0:76:42:b3:55:3a:4e:9f:1f:da:b7:
         df:64:b2:19:8c:8c:bb:c4:9b:c9:ea:3a:91:00:4a:74:cb:89:
         e3:a6:a9:cb:87:1f:c5:b7:b1:ca:3a:38:a4:3f:0b:b8:9e:a9:
         de:b9:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:09:49 2024 by rpki-client on console-ams.rpki-client.org