Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa
File:                     53f5720a-4660-348c-9091-256e0a230428.roa (raw, json)
Hash identifier:          K+RAC1hqV+ShKNGwIarmz9dyRCK7RDaRv+5BUBqFJ4Q=
Subject key identifier:   54:59:C3:66:36:AC:AA:FF:2B:20:05:A9:13:99:61:6F:E1:D0:23:BC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858458C6DD7C57305461F48CBB4C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     52391
IP address blocks:        216.122.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d7:c5:73:05:46:1f:48:cb:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=0c00d19d-69da-4a0f-9876-7c7bca54eaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:d5:86:aa:22:60:ab:ac:1d:02:88:aa:38:
                    0a:a0:c3:34:85:e7:c3:b5:ab:e4:55:7c:a4:ab:18:
                    43:d1:35:d5:50:a5:e4:c3:fe:8f:ab:b6:15:f0:53:
                    8f:62:64:84:59:1d:94:4c:61:0e:78:e1:86:de:5b:
                    9c:0e:20:9b:08:05:10:81:7a:86:bf:fc:d6:a8:59:
                    8f:2b:b7:d1:2c:d3:28:24:7a:e4:8a:1a:58:43:77:
                    ab:4d:43:e8:86:a0:dd:73:38:bd:4d:1a:bd:22:56:
                    c2:a8:5b:fc:5c:f8:2f:14:18:6c:da:97:5a:0c:79:
                    bb:9f:7e:86:05:4c:cc:a8:e1:a1:3c:8e:23:01:60:
                    93:aa:8d:1e:ea:55:22:7e:4c:f5:a0:7b:36:dc:12:
                    cd:c3:46:84:16:26:0a:b8:ef:e9:54:c0:3d:25:c8:
                    c1:f3:8a:80:6c:88:71:df:2b:be:d6:97:f9:c9:b4:
                    40:36:79:84:53:52:ed:47:eb:b5:46:d3:72:bb:07:
                    07:e5:a4:4f:94:af:66:89:52:00:09:5e:56:2a:e8:
                    97:be:d8:ce:a0:89:bf:41:e6:d9:ff:43:eb:2b:28:
                    be:c4:9b:ed:0c:c4:67:0c:2c:3f:37:23:e0:c1:f0:
                    ad:1f:78:94:e8:44:bd:3d:80:ac:bd:14:08:07:c2:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:C3:66:36:AC:AA:FF:2B:20:05:A9:13:99:61:6F:E1:D0:23:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/53f5720a-4660-348c-9091-256e0a230428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:41:62:aa:73:3a:f0:d4:cf:52:ba:2a:f0:64:00:35:a8:9f:
         8a:19:5a:07:55:50:7c:d6:f3:95:0c:df:ff:4a:62:e6:2d:e5:
         e7:9b:db:7e:21:82:cf:6a:de:4f:4e:9e:43:73:48:9e:0f:96:
         ca:11:aa:52:9e:13:bd:ec:42:af:43:9a:8a:62:69:13:5c:be:
         9a:62:c6:e6:3a:39:26:d3:fb:3e:64:09:d1:d9:3d:bb:a0:57:
         da:59:3b:f8:e5:e3:95:4f:c3:46:da:62:0f:88:9e:ad:e7:ce:
         96:30:ab:0b:8b:26:62:04:58:e7:9c:71:25:a3:54:90:3a:83:
         a7:58:33:7f:da:75:a3:06:bc:62:3a:d0:49:9b:54:af:37:85:
         9c:60:74:69:73:3f:a9:a9:bb:d4:b3:32:27:ba:fe:fa:14:52:
         8c:96:75:34:08:3a:e3:74:a9:a4:25:61:0f:68:27:d5:65:d1:
         8c:fb:56:de:07:78:3d:3e:1e:0f:a7:15:b4:f8:7c:2f:7c:64:
         ff:eb:a7:b3:f2:f4:86:22:88:39:70:23:0e:4b:69:6a:c7:38:
         b3:b6:68:9f:3f:1b:30:50:91:2a:37:9d:ab:e8:df:d2:b6:00:
         27:41:49:96:af:26:6e:22:37:97:e4:8c:cb:5d:45:7c:3d:25:
         d4:70:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:00:38 2024 by rpki-client on console-fra.rpki-client.org