Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/0e3d8004-3324-3301-950f-edc9d7716c4d.roa
File:                     0e3d8004-3324-3301-950f-edc9d7716c4d.roa (raw, json)
Hash identifier:          C4fhTyeN8MfUWkm6kQ0GKhcvO08r+pHDO10ICdZ0T5o=
Subject key identifier:   4D:E2:84:F1:3C:7F:DF:67:EA:D7:7F:C3:28:8F:90:54:B6:D4:EF:38
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F4328584529528E62F4A4CFB42796DC80
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/0e3d8004-3324-3301-950f-edc9d7716c4d.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     398017
IP address blocks:        216.169.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8e:62:f4:a4:cf:b4:27:96:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=4858fa5b-5012-4f8b-a817-50f30a1de2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:df:38:8c:a9:09:ae:85:e0:f1:fe:13:d4:
                    6f:fe:fc:a0:b1:ef:d4:d5:7a:ed:48:19:00:bd:6a:
                    8c:2b:30:ef:cc:44:26:30:4e:07:ac:ea:80:6c:5b:
                    ba:3b:15:56:44:2a:17:cf:f1:c1:07:17:75:d1:c0:
                    36:9a:5c:56:36:5c:8c:f0:5f:1e:b8:3b:c5:e0:53:
                    56:17:55:33:a8:f0:07:0c:b1:35:72:ce:8c:73:24:
                    3a:fc:3b:c4:2d:ef:87:f1:08:17:b3:91:70:73:07:
                    38:d8:2c:c9:a2:c0:29:f7:24:d5:c1:b0:99:4c:f0:
                    8a:00:65:5f:07:89:d7:9b:3e:ab:7d:88:df:8b:44:
                    d9:66:c5:3c:cb:37:d7:bd:d6:31:19:a5:52:a3:80:
                    9b:77:97:ca:9f:4a:28:3f:d2:e2:af:c9:52:10:bf:
                    1b:a1:4a:d8:64:03:de:b7:df:37:cf:c1:d3:93:9b:
                    37:77:bd:6b:a8:41:c1:75:06:d3:ed:21:4d:9e:cf:
                    18:f9:cf:7d:81:ba:18:61:23:ee:fb:11:c0:71:bb:
                    2c:5c:b6:af:5d:3a:22:a7:ed:07:b8:6e:0e:e4:96:
                    54:70:76:b2:fe:1f:5e:06:63:c0:9e:2f:1a:d6:ff:
                    1d:ae:3e:98:15:9a:b4:71:b4:d1:55:52:a5:d4:bf:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:84:F1:3C:7F:DF:67:EA:D7:7F:C3:28:8F:90:54:B6:D4:EF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/0e3d8004-3324-3301-950f-edc9d7716c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:27:ab:e5:b4:1d:53:5d:ff:69:50:a2:ab:cd:b4:17:60:1f:
         1b:9a:ef:ef:4b:99:a4:07:d7:bf:86:24:e2:fa:da:11:c5:31:
         27:69:2d:ad:b6:d2:9d:03:47:e8:62:ec:a0:24:00:d9:69:6c:
         ca:1d:6f:a1:bb:e9:81:b9:52:f6:a3:e9:f7:fc:a2:f5:09:39:
         66:d9:a2:21:75:ce:44:67:30:fa:a6:90:71:a0:3e:9c:1c:b5:
         cd:f0:96:a1:c9:cc:dd:af:19:d4:5d:b9:6b:85:c4:cb:ca:95:
         8c:79:b1:32:0d:0d:26:73:79:8a:54:b3:0f:67:85:39:b0:a9:
         50:9a:a0:76:3f:c9:00:76:1a:27:d2:d5:bb:04:81:d8:de:90:
         50:e5:c4:70:cc:dd:81:62:6e:44:71:49:1b:c2:67:a2:2b:32:
         b7:08:8b:79:fb:b5:b2:2e:cd:50:71:67:a0:b4:72:ea:f9:1f:
         74:1e:5d:a6:61:77:79:a9:c9:4e:96:17:cc:1d:02:a6:90:fa:
         5b:8d:99:e8:a7:b4:70:c0:a7:93:a3:c7:ae:b5:50:10:3a:cb:
         e2:08:0b:e8:75:3b:e0:be:de:53:1c:65:c4:b1:2a:4c:d8:84:
         0e:db:2a:2d:0f:f4:67:8e:25:6b:85:db:92:a4:a3:89:b7:38:
         a8:8c:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:43:19 2024 by rpki-client on console-fra.rpki-client.org