Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
File:                     4bd7e0b7-2238-33c8-a229-20f0948809be.roa (raw, json)
Hash identifier:          M6Xfl9nXxRo7pYRiWu6RMNVBGN6bXeL59OtwzwC0TFQ=
Subject key identifier:   27:B2:97:AB:58:78:92:02:3C:71:96:4D:95:E4:41:21:50:18:92:A2
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285845B4E8C3B2FF0F17E50395A880
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     3257
IP address blocks:        208.72.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:c3:b2:ff:0f:17:e5:03:95:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=f4ae6fa0-3faf-46b8-a102-50a30aadf1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:8f:81:e5:9f:f5:12:8d:e3:0e:73:fc:d9:
                    70:58:f0:48:be:15:fc:8f:65:c2:f2:c2:a9:3a:af:
                    e0:4f:2a:fa:d4:5f:12:49:16:1a:6f:80:4e:49:29:
                    69:9a:e6:58:c6:84:ad:43:71:c8:2a:22:09:e1:a7:
                    7d:6f:37:6d:a7:78:e3:cd:a5:31:41:1a:08:f0:41:
                    00:b4:67:f8:f3:8a:50:d9:b6:3b:a6:81:c9:08:5e:
                    34:b2:18:bc:95:24:70:ca:ae:db:55:3c:f4:a1:f9:
                    34:b8:04:68:25:d8:28:0e:e1:2d:34:3c:ff:e2:62:
                    6f:10:2d:bb:ec:82:62:4e:2a:01:33:5b:a3:dd:4e:
                    93:5a:d2:1d:7c:93:f1:ab:c9:e8:73:8c:60:dd:bd:
                    64:b0:29:d7:24:d4:c1:78:d6:59:3d:c9:b3:f8:7d:
                    a4:50:a3:9b:08:32:7a:9d:3f:22:2b:86:b2:97:bf:
                    4e:8a:56:48:a0:c6:54:0a:7e:68:6c:06:45:84:06:
                    ee:a3:58:3c:e2:e8:0e:4c:df:62:9a:64:2b:92:e6:
                    93:b0:b6:ac:0b:0f:da:5d:e8:63:11:03:48:66:cc:
                    c5:b1:15:bf:72:2e:60:4a:16:8a:b7:c2:43:a1:b7:
                    b9:de:20:dc:37:04:48:9d:ad:d8:88:9d:3f:e6:3f:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B2:97:AB:58:78:92:02:3C:71:96:4D:95:E4:41:21:50:18:92:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:39:31:73:20:9d:37:a9:f9:77:89:b7:e3:ba:bd:ea:3a:
         f2:d8:48:5f:60:73:91:97:b6:0e:b1:1f:1e:42:63:f2:e6:0b:
         36:b9:17:08:cb:e4:38:cb:b1:06:39:4a:ae:88:a4:31:46:d9:
         d3:72:89:c1:67:7f:e1:c6:8b:b3:fa:7a:6b:e0:40:86:7a:05:
         23:ad:19:74:cd:16:df:28:27:05:f5:d4:a8:bf:ca:d4:8c:5e:
         4b:a8:57:10:a9:b3:5c:73:9c:81:e9:c9:f3:96:1f:84:29:cf:
         fa:fe:b4:16:b1:d3:b5:8a:5a:c8:c6:df:e8:00:b8:df:7c:79:
         45:91:c9:d8:bf:7c:a0:71:e9:12:24:7e:12:44:f4:4e:6d:df:
         e9:fc:5c:06:1e:07:ac:ba:bb:b7:1e:ce:3c:66:f2:51:31:dd:
         b4:9a:6a:d2:30:ca:cd:cd:b3:a1:11:e9:af:31:05:9c:18:fd:
         bd:61:96:c5:eb:e9:62:96:bf:88:56:26:d7:99:ba:8d:b2:ff:
         68:34:7b:a0:32:d2:1f:d3:4a:35:c3:be:b4:a2:56:cd:f6:c8:
         86:97:23:3f:1c:a4:c4:40:29:8f:72:bd:28:d2:1b:fd:77:8f:
         96:72:64:9c:a1:a3:3f:92:84:06:6d:f6:ad:db:95:c4:b6:8f:
         6f:e7:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:18 2024 by rpki-client on console-fra.rpki-client.org