Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
File:                     b403408d-4926-31d4-9850-4a8d70ac0328.roa (raw, json)
Hash identifier:          czXv2v6NOkIoh/M7mmGe0P94ZPjZ3HBgIjhCI9cL7+k=
Subject key identifier:   D4:23:29:59:CF:9F:B3:51:AF:55:F2:DE:EE:C4:5B:44:35:8F:89:34
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F432858459368999850CC2B74A094DE40
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     398427
IP address blocks:        185.165.214.0/24 maxlen: 24
                          185.165.213.0/24 maxlen: 24
                          185.165.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:99:98:50:cc:2b:74:a0:94:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=88b269e9-d2a5-4d65-a7bd-83d4d4df17df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:6b:61:a4:7d:47:36:e2:01:ca:65:18:0c:
                    7c:81:ec:b4:97:0e:57:27:cc:27:13:6f:7b:14:9d:
                    64:92:d3:59:13:48:c0:6c:49:58:ec:0d:e2:a9:5d:
                    20:68:6a:9a:42:c0:cc:b6:da:9a:10:0c:d6:97:38:
                    f6:e3:ed:ea:7b:1d:73:22:57:96:e2:08:4c:10:b1:
                    1e:1b:eb:26:37:22:9e:d6:27:fd:e5:85:ff:76:ac:
                    71:f6:ed:cd:55:02:71:5e:46:0d:d0:dc:79:87:fe:
                    00:0b:ce:44:9c:84:03:d1:e8:76:6f:74:a4:2f:0e:
                    a7:e9:91:33:d7:8b:35:44:69:3d:be:57:0e:11:07:
                    d9:ca:3f:24:65:8a:12:06:9b:11:15:62:8b:13:4f:
                    27:cf:10:92:0b:3e:87:c1:ee:13:35:76:f1:60:19:
                    f6:57:bc:5d:73:f4:55:f7:ab:de:76:3a:22:31:3d:
                    34:da:ae:7d:c0:45:17:d2:d3:83:99:d1:f9:44:82:
                    e8:3b:d9:49:53:c9:f5:da:66:c9:b8:b5:78:22:d5:
                    5d:67:11:05:93:89:17:c4:df:e2:e2:4b:32:79:f4:
                    b2:86:6a:83:8a:b6:be:48:db:9f:c3:f7:5c:fb:19:
                    0c:9d:a4:f2:54:f9:f3:6f:d8:65:4e:22:91:10:37:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:29:59:CF:9F:B3:51:AF:55:F2:DE:EE:C4:5B:44:35:8F:89:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.213.0-185.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:78:7b:fe:66:c6:5b:f8:a7:84:a4:03:70:db:79:da:c2:
         7c:53:fd:c5:7a:fa:2e:d5:70:53:c1:ee:13:2c:3f:20:01:94:
         76:09:84:c4:0e:e8:aa:78:08:08:fe:41:d4:2f:67:df:a5:69:
         9a:f4:88:33:1a:65:dd:e4:1e:dc:f8:7b:3a:d8:8a:86:32:76:
         62:66:50:e8:9d:0e:21:7b:48:ba:56:83:23:4d:05:08:7c:9b:
         a9:6b:ed:51:4f:77:b7:51:3e:fd:8b:1e:67:f7:4f:ea:fd:22:
         c0:e7:89:3f:62:5f:4b:d2:f1:43:fe:12:6c:07:03:f4:45:74:
         21:ea:42:c6:08:1c:5f:a9:08:7e:f4:9e:30:e6:1e:42:ef:29:
         36:63:30:73:34:75:10:93:e1:9d:b6:05:69:0d:50:bb:0f:a3:
         4d:cd:b2:74:f0:6d:40:cc:8d:c5:8c:45:55:4b:33:b0:e2:09:
         d3:a1:d5:62:ae:03:37:10:b4:11:99:96:50:3e:e1:4a:b9:9a:
         f9:5e:77:5b:e5:f7:aa:7f:f5:be:24:02:c2:e2:aa:73:ce:41:
         85:ed:9f:79:ab:1f:ce:61:23:41:1d:7a:da:1e:b9:cd:62:8a:
         a3:77:52:5e:55:ed:eb:aa:71:e4:09:96:bc:ee:5e:ae:5b:ff:
         e5:21:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:03:25 2024 by rpki-client on console-fra.rpki-client.org