Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa
File:                     6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa (raw, json)
Hash identifier:          qg58pUzwsfLB3TLA1+aRBujM57OmTDe4CvrafCXN+IY=
Subject key identifier:   4E:46:F8:A4:C6:F1:1B:7E:0A:E9:B4:03:F1:EE:51:00:A1:22:8B:55
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844E6C3C8D8C3263149376AEE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa
Signing time:             Thu 15 Feb 2024 16:49:32 +0000
ROA not before:           Thu 15 Feb 2024 16:49:32 +0000
ROA not after:            Wed 15 May 2024 15:49:32 +0000
asID:                     5650
IP address blocks:        216.74.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:c3:c8:d8:c3:26:31:49:37:6a:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 15 16:49:32 2024 GMT
            Not After : May 15 15:49:32 2024 GMT
        Subject: CN=270edd09-8c14-4ffb-9436-34ecb9aeab41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:fe:a2:28:1f:53:ed:6b:3e:7e:11:ac:36:
                    38:0c:b0:f2:4a:f9:19:8b:82:90:7c:5a:b6:15:ed:
                    dd:86:5f:63:bc:58:ce:93:52:5d:4c:51:88:0c:99:
                    d9:24:4e:03:bd:9d:1b:ac:b3:3b:09:fc:ed:5d:9f:
                    a2:18:f1:78:61:25:35:e5:f2:60:c9:a9:f1:2d:73:
                    20:7f:ff:c2:db:a8:bc:24:f0:6e:0d:4b:c7:83:71:
                    6e:16:70:ea:7f:1f:ec:3e:30:f3:7f:e1:94:bf:0a:
                    63:23:07:b8:35:3e:7f:68:a7:35:d8:65:d6:40:0a:
                    56:c6:06:46:66:cf:2f:5f:f3:8e:5f:e5:97:f1:58:
                    e2:4f:a3:1d:98:b6:2f:b6:68:6b:e2:a3:9d:89:3a:
                    26:11:a3:6f:b0:b3:a7:77:f3:e1:10:97:d2:90:da:
                    ba:c4:4a:87:54:a5:e7:06:1a:a9:12:94:a6:5e:63:
                    9a:2a:f4:55:41:eb:33:92:b5:5e:cd:94:ce:2a:f3:
                    e6:d3:60:44:11:6c:b2:b3:de:ff:64:1d:0e:34:36:
                    d3:b8:b5:45:ca:17:ce:91:4e:8a:74:32:d6:97:da:
                    a3:f9:91:dc:e1:54:a6:c1:a1:e4:04:36:46:1c:62:
                    1b:e5:52:e1:c0:2d:ba:c3:8b:0e:05:19:e5:ff:a7:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:F8:A4:C6:F1:1B:7E:0A:E9:B4:03:F1:EE:51:00:A1:22:8B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b3:46:52:14:b6:72:5d:9a:89:73:bf:22:b1:7b:87:f5:5b:
         64:b5:9c:26:77:dc:b9:e8:30:68:c7:d0:22:12:bb:c7:a2:5a:
         08:17:1d:68:55:ed:73:d4:64:c0:e4:b7:76:6b:10:e7:f4:44:
         ed:4f:28:99:fe:f2:2d:ac:17:a8:23:8f:21:48:73:fc:15:55:
         35:59:80:d7:c9:f4:27:c0:10:30:40:6d:d2:61:52:b5:2f:db:
         38:76:79:9b:1c:74:b3:0e:57:d0:83:fc:ba:1c:03:47:4a:01:
         be:8c:e0:8f:19:25:c0:c4:96:41:90:25:4a:39:a8:bc:57:84:
         a5:7b:54:7d:63:46:e8:56:8e:21:98:0e:fd:a2:d2:44:da:fe:
         5d:5e:17:f4:0c:c8:ef:65:82:c7:10:d4:5b:6f:40:0d:0c:59:
         c9:25:88:cd:67:9b:60:11:21:46:cf:c7:51:79:db:2c:3a:22:
         9d:6e:43:b3:8a:b5:2e:8a:cf:65:f2:ad:de:37:67:7a:0f:e3:
         31:b7:55:a1:e5:1f:a3:70:96:ce:6c:49:c2:77:fd:68:9b:20:
         a1:d8:27:7a:11:b8:35:5d:1a:a2:a7:48:01:5d:14:72:9d:73:
         af:3d:5c:be:e0:f4:81:f8:2a:da:01:07:58:60:cb:06:73:83:
         72:06:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:47 2024 by rpki-client on console-fra.rpki-client.org