Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa
File:                     d7c63332-3eef-31f9-965b-5da1881f7e18.roa (raw, json)
Hash identifier:          u2UziwBB8fVp2aRGHwrxmo5+S8kLB+N2PygBZDnR2iY=
Subject key identifier:   52:8D:C8:B8:D4:9B:4D:A1:69:CA:7A:7A:6F:49:C8:03:F5:83:48:98
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F43285845E72926BF01CC20AB9DE563C0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     26057
IP address blocks:        168.238.4.0/24 maxlen: 24
                          168.238.6.0/24 maxlen: 24
                          168.238.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:26:bf:01:cc:20:ab:9d:e5:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=e69fe3e0-47ee-4931-8d4b-4b5b657133aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:b8:db:d6:5c:b3:84:4e:06:05:e7:c9:b5:
                    4b:89:7f:a1:02:9e:44:4f:f0:64:41:bc:76:e7:c4:
                    09:10:c4:82:a8:42:4c:31:22:83:ac:4e:7a:7a:f4:
                    0d:a9:9b:70:d4:42:5e:c3:16:e8:a0:9a:34:7c:21:
                    e9:f9:4f:82:81:90:7e:67:7c:c6:08:39:26:47:f8:
                    c9:be:eb:e6:4f:64:9e:ed:e8:d1:00:57:b8:ab:66:
                    86:bf:f5:4d:5d:37:cd:a4:f5:fc:24:18:cf:92:0b:
                    ce:b6:be:f3:c8:ff:2e:4f:e5:e3:0f:33:cb:b7:f2:
                    93:89:d5:f8:1c:d4:92:9e:4f:b9:45:51:ab:de:84:
                    e1:21:13:36:b9:fb:09:37:ee:f1:96:f5:29:7b:e4:
                    3c:d5:dc:c1:7e:5e:f3:98:5f:1d:46:64:45:75:16:
                    90:03:a5:8b:88:57:09:eb:08:38:dd:f6:82:de:9b:
                    d4:74:5f:94:8c:61:44:80:f7:7f:6c:66:56:47:3b:
                    f7:01:79:c7:b6:3a:5d:8d:e4:bc:21:2c:d5:ad:1c:
                    cf:a0:c8:44:39:6c:a9:7a:6e:d6:34:31:4b:b9:ab:
                    c3:35:75:04:99:08:32:db:e2:dc:c3:1d:a9:b6:53:
                    0e:b9:4c:52:74:21:15:f7:40:a8:c2:e0:48:68:8f:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:C8:B8:D4:9B:4D:A1:69:CA:7A:7A:6F:49:C8:03:F5:83:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.4.0-168.238.6.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c0:37:77:ea:d4:41:1d:08:b5:ee:89:91:4c:de:13:d0:db:
         ea:8f:ac:1a:3a:d1:d1:6f:0f:1e:95:b2:44:2f:f9:5a:bc:dc:
         ff:5d:3f:6c:ed:a8:05:c4:8d:f7:3f:61:25:49:1f:58:63:1a:
         49:2d:b7:8b:d1:fb:8d:e8:0f:c8:93:ed:3f:dc:50:15:bb:07:
         46:17:17:19:58:aa:f3:43:49:f5:35:d4:48:79:d1:a6:db:90:
         e4:8c:02:da:37:9b:da:2c:75:64:f2:17:6f:71:f6:62:03:61:
         12:a5:94:2d:ce:08:1a:63:3b:aa:82:c9:4c:01:fc:87:82:61:
         93:d6:67:16:9c:ad:95:a2:ad:48:16:c2:5a:21:86:8b:92:27:
         26:a9:6f:78:c2:8b:55:fe:29:f4:24:29:d6:9f:6d:6e:5e:f1:
         4a:88:1b:fe:68:48:4f:d2:41:ae:c8:49:fd:f8:cb:ac:72:34:
         bf:d4:0c:59:36:0f:20:42:f1:74:16:0b:08:70:20:42:5b:c2:
         04:5f:a1:21:d0:08:81:7e:66:80:73:a2:82:ae:15:e1:a9:98:
         54:f0:31:99:1a:6f:b5:d7:11:d9:e2:e5:73:3b:da:33:ec:9d:
         89:2e:ad:46:24:42:fa:76:88:10:ea:09:ab:3d:91:74:9c:95:
         7a:68:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:28:11 2024 by rpki-client on console-fra.rpki-client.org