Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa
File:                     de86099d-1376-3261-90ab-da88c15a123d.roa (raw, json)
Hash identifier:          2t1NFc0AZle+WsakJpDAzJiGE+5CE0w5owTUvWRN1gY=
Subject key identifier:   6C:88:52:AD:0D:6B:FF:A5:F2:8B:6D:43:83:06:3E:C0:78:41:CB:81
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858454626AB6DE71FED6518712A00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa
Signing time:             Wed 20 Mar 2024 20:50:34 +0000
ROA not before:           Wed 20 Mar 2024 20:50:34 +0000
ROA not after:            Tue 18 Jun 2024 20:50:34 +0000
asID:                     36492
IP address blocks:        216.252.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:ab:6d:e7:1f:ed:65:18:71:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:50:34 2024 GMT
            Not After : Jun 18 20:50:34 2024 GMT
        Subject: CN=a1b97435-25d6-4211-a226-a6b002faa088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:73:42:fd:af:c9:49:86:84:c4:12:63:75:
                    7a:e5:40:42:80:36:0f:fa:18:ab:bd:64:29:fa:20:
                    c3:28:07:81:b3:8e:fb:ed:86:4e:dd:35:f7:3a:e4:
                    69:0e:cb:b9:7c:00:ff:42:d9:c5:6a:8f:c0:88:31:
                    55:7b:30:7f:05:1c:c1:4a:d0:77:89:65:d0:8a:51:
                    2e:fa:3f:1d:25:67:5e:38:05:3f:f8:12:39:32:6c:
                    fc:cc:a9:d7:67:80:f5:cf:e7:a7:49:4f:4b:50:42:
                    6a:2c:6e:de:43:ec:97:81:5f:c0:48:78:80:73:ab:
                    b1:5f:72:20:68:07:53:33:4b:aa:3c:a4:75:09:02:
                    23:cc:e0:ca:18:93:6b:0d:1a:36:b1:ea:a3:5a:a0:
                    75:d7:3c:7d:9a:17:42:14:98:eb:72:3d:6d:76:e6:
                    54:59:3d:39:0f:10:75:cd:ae:50:29:b4:9d:ac:c2:
                    9c:55:48:dc:a5:95:f0:5c:b4:35:14:b5:1d:06:93:
                    ec:6e:46:36:f5:ac:56:7d:bf:46:8f:2f:88:a3:aa:
                    8d:ca:53:9b:61:08:e2:b5:3d:a4:36:36:c5:51:2d:
                    29:d6:dd:9e:9e:95:47:9b:f0:57:78:85:ff:c0:d8:
                    51:0c:c5:26:58:68:a6:d6:96:2d:c2:0b:cf:67:8c:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:52:AD:0D:6B:FF:A5:F2:8B:6D:43:83:06:3E:C0:78:41:CB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:b0:6a:4d:fd:14:8d:27:4a:bb:c1:e4:9f:13:bf:ce:ea:
         dd:bb:68:0c:ba:3a:5a:b4:49:57:64:14:ca:23:c2:75:84:0e:
         4a:b9:bd:41:df:a3:0d:aa:91:5b:73:51:23:f3:37:7a:32:21:
         9e:53:ca:b1:6a:67:2e:d5:81:e8:73:01:fe:f0:27:28:f5:2e:
         0b:68:a0:12:13:10:9b:06:a1:6a:c2:60:fd:5f:1d:c5:ab:ac:
         81:e4:97:35:d8:61:96:c5:53:01:d1:d3:95:d4:4a:6f:4b:91:
         da:fe:47:3b:e2:55:bc:1b:b9:ae:f1:59:c4:73:fb:01:08:9e:
         f2:e0:49:82:61:a7:d0:62:1b:8e:10:a9:45:19:ea:84:66:fe:
         57:11:84:53:7d:30:32:c6:36:a1:58:f9:07:54:98:35:f8:0d:
         e7:a3:c5:db:17:78:85:b1:77:8c:cd:58:07:1f:be:fe:b1:a3:
         ce:27:ff:16:ab:ea:af:e6:3c:bf:2e:7d:d8:e1:7a:68:a0:c3:
         30:ec:ed:2a:1a:56:95:6d:10:82:ce:4f:9c:9a:ec:75:b4:48:
         6e:2f:05:07:ac:f1:ec:b2:32:a0:e2:79:ed:40:7f:92:fd:d5:
         78:02:05:6a:b3:27:b1:c9:eb:5a:32:7e:4a:f9:8f:33:ee:58:
         4e:ae:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:27:45 2024 by rpki-client on console-ams.rpki-client.org