Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa
File:                     facb9f6d-63db-360f-ada8-edd0be484667.roa (raw, json)
Hash identifier:          NDS9DFJSElchMDQk9JztuLqZgkIIM/N83Jk4Cl79DYc=
Subject key identifier:   5D:04:C3:C2:AD:21:37:01:EB:44:B6:74:12:D7:21:2E:6C:18:29:E9
Certificate issuer:       /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
Certificate serial:       010D0C9F43285844F0354586C2FB3567578F3000
Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        135.84.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:45:86:c2:fb:35:67:57:8f:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=9899d523-aeea-47a7-bd13-91014267712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:43:c3:75:7f:ea:6f:a3:42:85:3b:3f:35:
                    c3:ea:98:c4:52:2e:b0:3d:36:3a:ff:67:7c:7c:3e:
                    f4:58:64:7f:78:9b:ab:f7:d5:12:bd:6a:ac:87:af:
                    21:a5:7f:d3:b5:ed:d7:19:3e:b3:a9:b3:7c:dd:e8:
                    cc:56:80:6c:59:24:b0:c9:31:1d:9c:cf:3a:11:1b:
                    8a:c3:62:e9:7e:e7:79:db:83:12:93:5a:97:0a:54:
                    65:8e:d1:72:f9:19:63:ee:68:43:fa:57:83:8f:53:
                    51:0d:29:a3:7b:44:8c:97:e7:75:0e:83:04:5a:dc:
                    ee:c9:7a:dc:d9:e8:22:0f:b6:91:80:b9:91:5c:1f:
                    3b:3a:4e:82:65:ef:ec:58:c4:f0:21:db:d7:9f:c7:
                    17:6d:6a:9e:ed:da:bd:5b:a6:ea:56:56:d1:93:20:
                    6a:9b:7c:59:1f:ce:4d:05:2a:dc:ef:78:15:b6:e4:
                    14:e7:a4:5d:61:93:19:87:94:da:80:ef:41:f5:ee:
                    1d:88:a9:d9:e2:1d:5b:ec:8e:13:0b:9e:c8:e9:7f:
                    bd:cc:e6:10:b4:09:a4:78:cd:c2:8b:4b:4a:ac:ca:
                    60:31:57:31:e8:03:ce:f4:26:3b:ca:42:b8:eb:ab:
                    8f:2b:e1:b5:de:77:e3:06:56:94:ec:ca:d3:1b:26:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:04:C3:C2:AD:21:37:01:EB:44:B6:74:12:D7:21:2E:6C:18:29:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/facb9f6d-63db-360f-ada8-edd0be484667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl

            X509v3 Authority Key Identifier:
                keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:db:ef:0e:af:3a:58:d2:73:2e:a9:78:f0:7a:ed:d4:f3:a8:
         c5:4d:67:66:e5:74:57:13:e1:79:ee:e9:01:cb:4a:68:a9:87:
         98:e9:c3:16:19:7a:43:ad:b4:01:95:e5:0e:59:69:19:b7:ea:
         c4:95:29:d4:3c:66:41:66:25:cd:c5:a5:06:68:f1:14:7e:e5:
         50:75:4c:19:8e:ee:bc:03:de:57:ba:34:3f:20:a4:10:02:51:
         5e:c7:42:88:78:0f:a3:7d:6a:9d:af:c1:62:2c:b9:64:fd:a8:
         93:c2:cb:d8:17:88:c3:51:c0:8f:25:c4:3f:f8:5e:90:aa:29:
         68:90:46:fc:e6:bc:7f:7d:84:56:a4:d7:6f:69:5f:d3:af:c4:
         a8:aa:55:bf:e2:c7:bd:c9:de:04:a0:83:c3:94:4b:0a:a3:bf:
         6e:5c:c1:40:b6:b0:58:09:8d:3f:5d:9a:0e:69:e8:f2:19:3e:
         03:09:25:2a:7f:04:86:2b:97:cd:fe:10:e8:6c:84:7f:6a:2a:
         09:83:0e:3f:3c:04:b1:3a:2c:d2:4f:72:52:48:13:14:3f:be:
         78:20:6d:91:22:40:85:21:88:81:c2:3b:a4:d8:6d:c8:fa:99:
         ed:b7:17:ba:fd:b7:69:14:5b:ae:02:db:0f:cb:70:47:45:25:
         a0:67:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:18 2024 by rpki-client on console-fra.rpki-client.org