Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2bec2b1b-b027-321f-89b9-5970cd290ab4.roa
File:                     2bec2b1b-b027-321f-89b9-5970cd290ab4.roa (raw, json)
Hash identifier:          tWYYVVBqq5i22IyC2bITJ4+/CVAV+amG5bTttER+tmw=
Subject key identifier:   EA:84:0F:2F:5F:2C:EC:C3:D7:86:ED:83:19:02:D5:C9:B5:FE:FA:CD
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858457A4885DC061D45DD1A74FD40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2bec2b1b-b027-321f-89b9-5970cd290ab4.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     30133
IP address blocks:        199.6.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:85:dc:06:1d:45:dd:1a:74:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=66b20915-b945-4f6e-aeb1-db1c646cfb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:fb:2c:7d:b4:15:63:73:cd:58:6f:11:be:
                    d4:7e:ea:84:98:5a:6a:6f:4b:04:fb:88:3f:7e:8b:
                    9b:e0:49:aa:35:66:59:63:18:d6:ce:ec:9c:b0:dc:
                    8a:e8:98:7c:96:39:da:51:44:83:91:e1:93:76:ff:
                    ca:00:9c:8a:bc:2f:93:58:de:c3:38:85:3f:81:2a:
                    4a:71:57:1b:f9:4e:4c:46:f1:b4:9b:05:bb:30:c5:
                    14:5c:78:52:bc:41:01:86:c2:bc:e4:c1:dd:88:1f:
                    01:80:df:ef:7c:de:d0:76:a0:48:fb:52:5c:6a:c3:
                    d4:a5:8b:e7:44:5c:88:e3:10:1f:7c:c0:e0:73:e9:
                    21:62:8c:cb:6d:1f:e4:a5:e6:26:ee:80:33:63:f1:
                    78:5e:4e:67:6b:d2:91:e1:63:59:29:00:a2:ff:95:
                    d9:af:ff:d5:10:21:61:a0:08:0e:bc:a5:a5:db:9f:
                    25:db:08:69:2d:00:e1:10:54:c9:36:1a:e4:69:ae:
                    5e:0c:ed:93:90:fd:5e:19:4a:35:c7:7d:e0:d1:dd:
                    07:8d:63:ec:9b:46:fe:8e:44:fd:28:d0:85:f4:dd:
                    76:32:17:15:83:a7:1c:e1:f0:ad:57:4c:83:84:90:
                    87:a9:ae:3a:7e:44:cc:a3:53:64:5c:78:df:46:dd:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:84:0F:2F:5F:2C:EC:C3:D7:86:ED:83:19:02:D5:C9:B5:FE:FA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2bec2b1b-b027-321f-89b9-5970cd290ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:6a:f0:88:07:63:de:a6:68:e0:79:a2:09:06:a2:d9:53:
         bb:e6:f0:fb:84:ad:40:95:ea:ab:94:cc:f3:de:dc:d7:ef:de:
         4f:2b:f9:c8:b4:32:ba:b7:81:3e:f3:7d:a5:42:d2:39:79:7e:
         9f:40:15:ce:5f:b5:ee:1e:85:1b:b4:4b:78:03:ac:91:d5:bf:
         28:34:26:ec:c7:4d:05:76:1d:63:6a:ff:af:c8:24:66:3e:a2:
         61:20:3b:9f:38:bc:1a:5d:ab:bc:3e:d0:18:c0:f5:6c:5e:8b:
         e9:64:78:12:c4:fa:bd:30:93:3a:14:03:95:14:bd:6e:3a:0b:
         31:f8:9d:d5:d2:a9:7c:f5:5f:be:f1:1f:0f:93:f7:4c:a1:be:
         4f:bc:74:d4:98:85:ca:f2:19:22:dd:c2:65:86:b8:12:5e:c9:
         a9:d8:4d:ce:a5:36:d4:a6:4d:b0:57:30:7b:40:24:3a:82:51:
         ef:d6:fb:8b:4b:d8:81:4c:96:fe:2a:e2:8b:1e:fc:86:26:c8:
         74:58:4f:b1:41:13:81:21:2f:f5:4b:0b:0c:0b:3c:41:51:c2:
         8b:84:1f:08:e3:d6:05:18:11:b9:4a:26:d8:cf:ba:75:92:9b:
         5c:f6:27:37:f4:c0:75:59:05:4d:f5:5f:1b:98:cd:22:18:c6:
         c6:ad:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:55 2024 by rpki-client on console-fra.rpki-client.org