Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e33ce29-963f-3a8a-a94c-e4ea2c351fb6.roa
File:                     6e33ce29-963f-3a8a-a94c-e4ea2c351fb6.roa (raw, json)
Hash identifier:          ub7TGi3ADBWxeLbJTLL+2fV/+8z4KWJyEduwSAm5Fcg=
Subject key identifier:   6C:DF:63:C7:B7:16:33:C5:37:B8:5C:43:85:CA:02:22:17:38:93:32
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844A904E14C7018255182CDA480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e33ce29-963f-3a8a-a94c-e4ea2c351fb6.roa
Signing time:             Wed 24 Jan 2024 14:00:30 +0000
ROA not before:           Wed 24 Jan 2024 14:00:30 +0000
ROA not after:            Tue 23 Apr 2024 13:00:30 +0000
asID:                     14445
IP address blocks:        216.122.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:04:e1:4c:70:18:25:51:82:cd:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 24 14:00:30 2024 GMT
            Not After : Apr 23 13:00:30 2024 GMT
        Subject: CN=28ef4ca6-53a9-4707-a071-8e75c2f901f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:15:c5:64:34:f2:90:27:ac:57:f7:b8:62:
                    9a:c0:1a:38:f2:db:9a:01:27:8f:8e:10:0b:2d:58:
                    20:17:fe:da:27:da:1b:f6:54:98:ae:be:e6:ca:63:
                    ab:82:00:d5:6b:57:4f:bc:6e:28:bf:57:5d:fd:12:
                    0d:8a:f5:bf:67:06:d5:48:cc:09:8c:b2:1d:0a:d0:
                    62:00:6d:66:41:df:61:7d:9a:d0:5b:e6:51:53:25:
                    58:d3:3d:30:e9:cf:b8:3f:f5:ac:af:aa:56:58:dc:
                    57:38:e0:e6:55:2e:a6:eb:03:ed:9e:fa:de:80:f8:
                    ce:8a:e0:f7:d7:cb:9d:ef:0e:d3:ec:1e:97:31:7f:
                    e8:cb:d4:65:bd:5b:1b:83:c1:c0:72:b1:02:00:1f:
                    a7:5c:bf:60:52:42:55:1b:8d:51:ea:9e:32:c6:d8:
                    45:ac:e6:8a:0c:7d:17:33:82:f0:04:a3:6f:40:80:
                    57:b0:28:19:f0:83:f4:19:61:17:1e:77:3d:b5:36:
                    cc:2b:b6:f0:e7:5b:52:31:ed:cf:56:99:38:74:b1:
                    7a:0b:cf:3a:a3:44:8a:7f:c2:01:be:96:1d:81:44:
                    7e:46:20:fd:02:ae:3e:66:d8:58:cf:77:6b:22:5b:
                    06:15:60:98:19:19:5b:35:2a:25:a1:08:39:2c:32:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:63:C7:B7:16:33:C5:37:B8:5C:43:85:CA:02:22:17:38:93:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6e33ce29-963f-3a8a-a94c-e4ea2c351fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:34:9e:43:84:ac:24:0d:b3:9f:29:26:aa:23:c8:14:fb:
         2b:6c:32:7a:b5:71:e1:5b:dc:d1:c2:29:7a:e2:ca:91:31:0f:
         af:ab:57:7a:88:aa:72:bd:dd:35:cc:1d:53:04:12:4b:b0:4b:
         a5:5d:b1:4e:60:78:8e:68:94:44:5b:a0:eb:bc:f1:eb:17:81:
         fe:05:4b:06:53:5e:3c:5d:f0:50:30:ea:b6:15:b4:21:0c:2f:
         f2:af:d3:d4:be:77:7a:6d:ae:41:c1:78:34:14:b0:60:83:1f:
         59:3c:c0:dd:04:5b:81:90:69:d5:85:14:f4:a8:20:7b:62:a3:
         2f:65:e8:98:bb:f0:c8:44:4a:8b:74:a1:e3:b6:78:d3:55:c8:
         d4:06:89:d5:1f:fd:e1:f0:db:b2:be:62:e5:0a:8f:be:fd:b5:
         58:29:9c:7c:15:44:9a:cd:a4:43:9d:22:70:47:19:c2:a9:19:
         9e:34:b4:76:92:ce:6a:f9:b1:1a:57:e2:22:c7:c7:32:b4:95:
         b6:6b:f9:cf:7c:f2:33:fb:3a:18:24:d3:96:6a:45:50:c5:78:
         7e:6e:99:0c:62:7c:e1:0f:49:dd:fc:74:e4:9e:70:15:13:04:
         8c:08:fe:2a:c8:00:48:b6:d7:23:ae:3a:d5:cb:a7:21:5d:54:
         c7:8d:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 06:24:58 2024 by rpki-client on console-ams.rpki-client.org