Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5a41cd0b-6381-364d-9430-4ef6eb9c1225.roa
File:                     5a41cd0b-6381-364d-9430-4ef6eb9c1225.roa (raw, json)
Hash identifier:          yNiRT2NkA5FSofLd6FZYNt2Vl1p0xuPfD1gBY8cXu7E=
Subject key identifier:   A0:06:5B:46:D3:14:26:B2:68:BC:03:E0:4F:90:4B:A6:62:56:30:2A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE071603C16333C31A8390
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5a41cd0b-6381-364d-9430-4ef6eb9c1225.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     17359
IP address blocks:        208.89.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:07:16:03:c1:63:33:c3:1a:83:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=b5d46d84-f55e-41f6-95c6-420585df58dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:5a:04:df:fe:4b:af:d7:9e:db:15:8d:84:
                    96:b9:9d:be:4b:ba:8e:e6:a3:33:b3:88:76:c2:30:
                    50:94:c2:47:e1:e4:be:32:db:a6:6e:36:4a:4d:e1:
                    8d:7e:06:a7:c1:f0:2b:9d:08:45:29:e5:8c:58:49:
                    e9:db:19:38:a5:7d:62:dc:8e:43:6e:d2:4b:fc:f5:
                    ea:b3:ac:6b:cb:d7:8f:5c:ee:41:46:d0:a9:37:91:
                    ab:8d:1c:30:43:bb:e2:88:0d:27:74:61:c7:ee:c0:
                    b3:2f:cb:4d:e1:96:0c:90:4f:53:0e:ac:0f:a7:08:
                    81:21:51:62:32:1c:cc:ab:57:2f:0b:0b:01:dc:b3:
                    66:d0:28:e5:e0:b1:ed:6b:c0:ec:0f:49:f8:a1:4b:
                    03:38:35:76:8d:d2:9a:64:9c:04:79:02:2f:33:3f:
                    65:ec:a2:78:1e:5b:0a:05:12:c1:67:31:cf:34:6d:
                    9e:81:ce:f8:e2:00:07:24:5f:75:33:22:08:6e:d1:
                    f2:f9:a2:cc:3f:55:0e:71:4e:b5:ab:76:67:b0:de:
                    c5:5e:d4:67:bc:e5:f7:a2:f6:9b:aa:eb:4a:d8:36:
                    83:5f:80:e4:a5:cd:c2:f1:fa:a3:f4:94:6e:1c:08:
                    cc:f4:14:ab:e7:03:24:7a:e8:7a:8d:cd:ad:1f:c2:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:06:5B:46:D3:14:26:B2:68:BC:03:E0:4F:90:4B:A6:62:56:30:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5a41cd0b-6381-364d-9430-4ef6eb9c1225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:07:04:39:29:25:a2:65:28:37:45:4a:38:e5:f3:95:1f:87:
         4d:20:35:75:81:f4:08:ff:ab:8e:57:75:c3:5e:f7:05:79:25:
         34:01:cf:79:64:63:8d:93:1b:5f:43:31:83:07:e2:f5:cd:51:
         fa:91:04:b3:66:4b:cb:f8:31:63:44:04:37:1b:37:5c:fa:be:
         aa:f9:11:0d:65:41:22:a2:8f:0a:33:51:12:1d:9d:f9:d2:1d:
         d1:9d:4d:ea:d3:e8:aa:42:c5:4d:8b:cf:98:ba:71:fa:01:ec:
         be:7f:42:c9:64:43:20:12:76:4d:32:b1:d2:21:28:ee:3b:c4:
         3c:37:ab:96:2c:c3:9a:18:d0:76:cf:ae:6a:41:c4:89:93:7e:
         a6:e0:dd:f6:12:af:4f:30:2e:ee:2e:4e:52:e4:47:52:1d:54:
         74:0f:e0:34:3c:0e:38:bd:e1:20:77:fe:a8:1b:d3:f3:36:b9:
         56:07:00:d0:e2:7e:19:7e:7b:ad:65:c4:cf:dc:35:a0:be:9a:
         fd:94:79:93:27:c1:e1:ae:e5:fb:30:0a:49:3b:9d:13:af:f9:
         c9:aa:d7:57:f3:0b:49:27:a9:3d:e5:ca:84:be:a6:8e:df:96:
         3c:0b:e9:16:00:64:6f:b8:dc:61:cb:6a:3b:1f:96:1e:73:8c:
         e1:d4:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org