Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b02caa30-ef8b-3c24-913f-d9315eb0e934.roa
File:                     b02caa30-ef8b-3c24-913f-d9315eb0e934.roa (raw, json)
Hash identifier:          FVmI91LIV/WmVYdYxnn65fRUF+TggtfJ9hTsZXgl2MI=
Subject key identifier:   C7:00:57:84:66:FC:8E:16:68:C5:E3:24:85:2F:E9:EA:F5:2E:BF:AF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584554981C041288AADF2CBEA480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b02caa30-ef8b-3c24-913f-d9315eb0e934.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     834
IP address blocks:        216.122.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1c:04:12:88:aa:df:2c:be:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=cd5a0214-b3f3-4d92-895c-d21aa0867f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:d8:59:a6:6f:b1:de:ac:c6:12:18:db:b1:
                    29:28:5c:f9:6f:28:0e:29:39:e7:e1:10:8f:66:3b:
                    aa:0c:66:3d:96:ad:cd:5a:0d:e7:bd:79:55:59:4b:
                    51:f7:85:70:ac:ad:88:77:c0:d8:75:7a:ca:d6:9e:
                    95:c3:03:af:17:70:da:c2:ab:dc:26:7f:a0:3d:1c:
                    96:8a:7c:02:a9:c9:59:a9:58:ac:c2:f0:2b:37:fb:
                    0c:ba:ae:ad:6c:d8:ed:af:80:1d:a6:d5:b5:3a:db:
                    08:90:0a:e9:4f:ce:de:1f:c5:3c:87:f0:66:53:56:
                    f7:97:e7:df:97:84:62:bc:ae:04:71:f3:d4:2b:35:
                    33:88:5e:22:0f:37:36:e2:0e:6f:f7:5d:28:23:cc:
                    1a:84:85:94:b6:56:24:65:d6:56:c2:86:45:d8:22:
                    d9:f8:1d:d3:cb:05:42:6c:eb:3b:22:68:61:a9:31:
                    5f:ac:b3:d8:cd:4b:b0:98:a2:61:c1:87:5f:76:e5:
                    8a:1c:7e:6f:aa:11:4c:5e:3c:ec:2b:31:c6:aa:58:
                    57:23:92:05:ff:4a:00:54:05:73:0a:00:77:40:cc:
                    67:2f:59:da:d2:89:4e:b9:6e:31:c8:47:eb:41:7d:
                    fb:13:5e:a3:fd:7f:12:cb:12:fc:91:2c:51:f2:b8:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:57:84:66:FC:8E:16:68:C5:E3:24:85:2F:E9:EA:F5:2E:BF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b02caa30-ef8b-3c24-913f-d9315eb0e934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:17:99:9b:c9:a0:bc:4b:4b:8f:68:97:7d:e8:b3:47:44:76:
         be:d1:19:0b:1f:82:b6:bf:5c:7c:22:e4:80:4c:e9:f1:d6:d7:
         83:2e:1c:0a:1d:ce:bb:d4:34:ff:86:5c:91:e1:d3:9a:f6:af:
         d6:26:06:f0:5b:27:ae:a3:c5:75:63:f6:a0:f1:8b:27:90:4f:
         3e:6f:cd:c9:c6:15:72:f7:72:0e:f2:0f:e3:32:13:0a:e0:95:
         27:b6:ee:3a:ee:c6:ed:92:44:62:63:2e:22:b4:64:00:04:b5:
         02:56:f8:bb:d3:5e:27:51:36:06:c0:5e:9d:09:c7:75:db:4d:
         9f:0b:89:5b:95:a0:3e:f5:30:7a:12:97:89:6e:36:6f:dc:37:
         b8:1d:58:70:70:28:0d:19:83:84:e8:f4:39:f6:b1:5c:1b:12:
         43:97:91:da:d9:5f:d1:d1:b6:8d:7e:6c:f6:a1:60:34:3d:0c:
         de:8f:ab:9b:ac:be:37:90:f9:54:b0:51:eb:4e:18:27:c5:ee:
         27:e3:e6:96:02:2e:ce:22:1d:0f:66:4f:fa:bf:97:99:7c:d1:
         81:6d:e9:0a:86:d2:85:ad:f3:b7:54:26:41:31:67:98:49:4f:
         97:f1:a1:18:24:9c:c9:21:d8:10:4e:3b:2c:38:83:63:56:fc:
         15:7e:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:17 2024 by rpki-client on console-fra.rpki-client.org