Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
File:                     d032a8d4-77d0-39c1-86bb-5584ef9af130.roa (raw, json)
Hash identifier:          V0iYq053hdx7RhsR0i8Ve8HT2P1ug8W1+5uHQnnDtlI=
Subject key identifier:   A2:99:F2:11:B3:D4:C0:0E:0D:CD:5D:A1:BC:D9:12:BD:75:40:A9:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844D5D44F95382AFC4ECAD48300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
Signing time:             Fri 09 Feb 2024 15:14:06 +0000
ROA not before:           Fri 09 Feb 2024 15:14:06 +0000
ROA not after:            Thu 09 May 2024 14:14:06 +0000
asID:                     212238
IP address blocks:        216.107.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d5:d4:4f:95:38:2a:fc:4e:ca:d4:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  9 15:14:06 2024 GMT
            Not After : May  9 14:14:06 2024 GMT
        Subject: CN=89052df8-13bd-460f-8fc0-ab9fb35d43f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:16:b4:73:78:35:e2:52:48:bc:0c:8a:57:
                    0a:11:4d:c9:3b:5f:d6:c0:ab:15:3f:42:df:ef:7e:
                    e2:86:d4:54:20:6a:eb:27:83:9e:d5:17:f6:4e:60:
                    85:56:1f:a6:db:64:7f:d6:01:10:8f:5e:df:4e:52:
                    bf:b2:4c:fc:f6:0b:2e:71:56:ca:8e:c9:bb:83:2d:
                    04:3c:e3:f7:c9:73:b2:c2:38:dc:e4:a8:0b:1d:e3:
                    3c:3f:a1:7c:c9:a9:0a:84:f7:21:60:f5:fd:bd:f4:
                    2a:44:79:bd:2d:93:f5:c1:a6:c1:a4:26:84:6e:2d:
                    e6:c8:8a:09:64:48:12:09:74:b6:67:d4:30:b7:79:
                    74:a0:03:c7:9a:f6:0e:50:7e:26:04:fa:52:f8:b7:
                    9f:00:46:e4:4a:06:23:f1:30:13:09:77:e9:4a:0f:
                    6f:fd:f0:71:75:37:67:b0:7f:b5:25:9c:2a:73:dc:
                    22:e1:ff:da:bc:50:7e:ee:15:8f:66:a9:ec:96:c2:
                    7c:3a:91:e1:78:91:92:db:c0:1d:4a:1e:de:86:9b:
                    16:12:17:e2:cd:bb:53:e9:e7:71:29:1f:a2:19:6e:
                    f8:ec:18:2b:ce:c3:e9:a5:83:13:b7:f4:94:c8:c6:
                    db:b0:b9:f9:1a:67:ae:9b:0e:77:f3:0d:d3:c1:e7:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:F2:11:B3:D4:C0:0E:0D:CD:5D:A1:BC:D9:12:BD:75:40:A9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:a6:9c:34:cc:5e:9b:07:a4:36:0c:b7:c1:2c:22:ba:b7:
         9a:9f:3d:0a:0e:d3:9a:99:bc:31:be:0e:f8:fa:af:31:af:4f:
         f6:9a:9d:4b:d6:94:53:36:c8:22:13:8e:bb:d3:a9:c1:e2:45:
         8a:b8:87:30:f4:94:b4:ba:3f:5d:52:00:92:af:15:aa:98:a3:
         5f:be:29:a6:05:71:d8:5c:23:97:95:41:08:75:2c:82:0b:1b:
         2b:b3:48:b7:d0:5c:b2:dc:68:6b:50:82:67:df:1e:55:52:90:
         bb:e3:cf:9b:2f:ed:1f:8c:b4:c5:d8:60:a4:59:90:6a:2a:1c:
         5b:85:b8:51:2b:ec:6d:4e:01:3e:8f:76:ef:6f:bd:11:c7:86:
         57:48:81:62:22:f3:fd:d8:d6:a9:90:94:f4:30:90:70:c0:79:
         06:38:b8:9b:53:e6:3b:5d:f7:72:5b:da:47:33:28:a3:52:46:
         86:6f:bf:55:af:89:1d:35:5a:b2:66:fb:29:9c:d7:83:16:fd:
         92:e6:66:74:34:3d:d8:ac:61:c2:cc:a0:4f:b6:fa:3e:6b:5a:
         a2:1c:34:fc:b8:42:7e:75:41:d5:4c:fc:49:f1:58:05:25:b4:
         56:e6:0d:b9:5d:9c:f1:af:c1:ed:ac:da:a7:bf:c0:f6:03:a0:
         29:8c:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:34:03 2024 by rpki-client on console-ams.rpki-client.org