Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82d3b1f0-40f5-3933-bc7f-b509c3b94543.roa
File:                     82d3b1f0-40f5-3933-bc7f-b509c3b94543.roa (raw, json)
Hash identifier:          AZ6yqjJeeSKYHBBt5f63oIfCOK61HXpRp27qOLC/wG0=
Subject key identifier:   47:6E:FD:8F:13:21:C6:F1:D4:51:F8:F6:9B:D6:68:08:CF:CD:61:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845304D3E69705D0AA28ED75080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82d3b1f0-40f5-3933-bc7f-b509c3b94543.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     396356
IP address blocks:        216.107.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3e:69:70:5d:0a:a2:8e:d7:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=5fb2927a-4363-4faf-bbaa-b7fd64c07343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:c5:ab:78:ff:a5:68:43:a9:fa:83:08:f5:
                    a1:c1:1a:04:4a:6a:38:38:61:93:2e:f6:ee:af:30:
                    96:01:b0:62:b5:a8:07:bd:ca:26:4f:4b:ac:bf:c6:
                    42:1b:87:25:c8:f2:55:6f:c1:52:1d:6c:77:4f:2b:
                    90:83:4b:56:c5:f9:8c:2d:e6:50:db:86:a8:7d:7e:
                    b5:f3:d5:0d:93:a9:ab:3a:e9:77:2c:ec:b2:5e:25:
                    a2:52:6d:82:7e:4e:b5:86:fc:71:0c:8c:31:e1:55:
                    bb:ba:b8:97:f1:57:82:5d:0d:22:34:53:86:cb:cb:
                    e9:30:79:0f:77:87:59:9f:88:8e:66:1e:a0:37:ac:
                    ca:f0:fd:75:09:80:a8:31:e4:26:b3:29:b2:75:7e:
                    ea:d1:95:a0:16:b4:7e:c7:5a:1a:16:9f:e7:58:9f:
                    e2:84:bd:55:89:55:7b:cd:79:e9:7a:17:b4:47:d4:
                    a3:29:93:a4:13:e1:32:c6:e2:7a:51:9f:ba:26:ac:
                    91:75:52:7d:41:0a:c3:1f:11:5a:52:8f:5b:ea:05:
                    29:cd:55:35:9c:8d:61:ae:13:5b:5a:19:ad:42:2f:
                    fc:8e:c4:76:a1:08:f8:7c:bd:77:1e:78:b5:ac:8b:
                    0f:b2:0b:43:89:39:d4:35:3b:75:71:c9:14:c6:b7:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:FD:8F:13:21:C6:F1:D4:51:F8:F6:9B:D6:68:08:CF:CD:61:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/82d3b1f0-40f5-3933-bc7f-b509c3b94543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:0f:d2:09:67:77:df:f8:bc:26:a6:69:e2:16:f7:93:46:
         09:8e:d8:be:6e:9f:5b:a3:68:a2:cc:f3:c7:83:20:9f:f6:a9:
         3b:4d:f8:96:81:80:2d:ca:8c:52:75:bb:e3:c2:16:71:5a:d0:
         55:8b:07:ec:9b:0a:66:55:90:65:b8:25:a2:b6:c7:a2:3c:e0:
         0e:28:a2:27:72:7e:bc:a9:7d:6d:a0:2e:81:2b:3d:ef:92:c2:
         e6:1a:51:a9:58:62:12:cb:45:98:e7:02:e0:18:dd:c1:5f:c3:
         80:40:ab:2e:2b:cb:65:14:88:38:65:38:d2:26:34:84:ce:a9:
         a7:c8:42:b9:da:41:75:f7:f7:6e:58:23:67:75:a1:e1:b2:c5:
         0a:c3:42:c4:69:41:df:02:7d:f6:4d:70:e7:83:5e:50:e7:6a:
         ef:19:17:be:b9:55:5f:fa:77:3c:c5:9b:b0:9b:84:64:4d:61:
         8d:d1:1e:9e:44:8e:57:6d:f2:73:a9:89:12:71:c6:ac:2c:e6:
         89:d7:be:16:6f:9a:a4:b3:86:62:b5:18:5b:09:50:d0:c1:6a:
         88:e4:21:12:e6:4b:94:4c:03:e2:4f:f8:c2:cf:bc:f6:66:4b:
         cf:3a:c5:ff:f2:8f:20:b9:d2:2e:92:de:fc:81:1b:7e:dd:1e:
         3f:c5:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:44 2024 by rpki-client on console-fra.rpki-client.org