Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/ad0bd313-b33a-3ab6-90f3-099d0fa7917b.roa
File:                     ad0bd313-b33a-3ab6-90f3-099d0fa7917b.roa (raw, json)
Hash identifier:          2BVDZDr+DYixCB3RNP/+dyksQ2dEYTnhipXWxby7zX8=
Subject key identifier:   21:67:56:5D:D7:BE:EF:CC:DD:DE:16:F6:2D:0C:BF:17:50:CA:97:EE
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F43285845462B0EE212F0724B7226FF00
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/ad0bd313-b33a-3ab6-90f3-099d0fa7917b.roa
Signing time:             Wed 20 Mar 2024 20:59:25 +0000
ROA not before:           Wed 20 Mar 2024 20:59:25 +0000
ROA not after:            Tue 18 Jun 2024 20:59:25 +0000
asID:                     6762
IP address blocks:        162.213.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:0e:e2:12:f0:72:4b:72:26:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Mar 20 20:59:25 2024 GMT
            Not After : Jun 18 20:59:25 2024 GMT
        Subject: CN=6cd63d48-0d7b-4f8b-bf71-5fb36138fe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:e0:85:39:1d:58:c9:ef:c9:ea:27:fe:57:
                    76:2a:7d:2e:2a:95:15:85:2d:4e:c2:46:b4:e1:e7:
                    6e:84:31:da:e1:31:30:e4:a7:e1:f9:4c:df:8b:50:
                    78:34:87:99:24:de:f1:35:35:10:e9:05:68:df:87:
                    b8:d2:7c:da:6a:d2:51:43:a0:02:84:df:8b:b1:c7:
                    56:55:02:6d:2c:d9:40:1d:12:0d:10:0d:3f:ae:9a:
                    0e:cb:26:b3:9e:9e:aa:05:0b:ac:51:8e:9b:ac:e3:
                    a0:83:38:5c:7d:e2:1a:30:59:50:ca:9e:5b:ce:87:
                    fb:99:9f:df:b6:62:2b:09:f0:e6:e3:ac:cb:d4:97:
                    85:09:35:09:6d:1f:de:e1:96:d8:7d:28:36:7f:bf:
                    79:1f:18:62:02:a2:0a:91:ae:59:35:67:da:cc:ba:
                    11:11:2d:83:16:a6:19:73:4c:fe:93:e8:25:04:a5:
                    e0:1e:6d:4a:2b:98:cf:c8:91:c8:4a:bb:85:1b:0e:
                    eb:3b:f1:2f:67:20:ca:2c:50:e4:e9:45:10:4f:7b:
                    a2:33:c6:9a:75:ff:9f:5c:54:f8:de:67:51:29:6e:
                    1d:c0:60:c4:10:cd:7e:1f:87:8f:54:a7:5b:77:0d:
                    19:e9:be:44:fd:43:b3:11:47:f7:11:14:ad:fc:f8:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:67:56:5D:D7:BE:EF:CC:DD:DE:16:F6:2D:0C:BF:17:50:CA:97:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/ad0bd313-b33a-3ab6-90f3-099d0fa7917b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:63:eb:84:f3:0f:50:63:30:37:3c:c1:e0:6a:68:e6:ca:
         54:a2:4f:a1:f2:4c:63:7d:f4:1f:c5:ff:78:14:3b:7d:1f:f4:
         91:99:d8:19:66:c0:45:7c:e1:e2:c8:b4:4a:24:30:69:4d:f1:
         14:ac:f2:d5:e2:83:35:c7:f2:a0:26:fb:ea:45:b2:d6:d6:30:
         98:28:98:17:b8:21:87:70:3a:3a:31:87:e9:ab:ae:40:3c:9a:
         ac:61:25:19:4f:cd:46:6f:4b:ac:e9:f8:9c:15:f9:4e:57:cf:
         f8:62:b5:cf:9c:11:67:3b:d4:01:44:7e:41:99:c1:f7:4e:07:
         44:4b:55:1f:bc:b7:8b:11:83:4c:52:e6:73:2c:ff:61:69:fb:
         05:eb:67:1d:74:92:18:d1:56:5d:60:a5:42:fd:c2:c1:7b:ba:
         e2:1f:68:fc:4b:11:04:f3:39:c0:eb:f7:db:48:b5:b1:c2:83:
         b6:7b:36:26:3b:13:89:30:33:81:92:ff:d6:73:b1:3e:33:6c:
         b6:cb:1d:ca:98:1f:e4:f7:21:0a:58:de:20:3e:42:98:09:d6:
         52:18:e8:42:d8:bd:1b:a3:7e:1c:6f:37:fe:05:01:ba:14:56:
         11:b9:f3:15:c6:0d:68:cb:34:df:d1:59:07:38:a2:6c:0b:4f:
         82:7f:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 06:43:31 2024 by rpki-client on console-fra.rpki-client.org