Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/0b164b14-ac3a-3f60-bbdf-6468483bae70.roa
File:                     0b164b14-ac3a-3f60-bbdf-6468483bae70.roa (raw, json)
Hash identifier:          ipvmen2R2TEqjRnS8kp1yPympI0m1fovaGRUzMVB0rA=
Subject key identifier:   41:90:EE:B0:2B:66:CC:3A:04:57:D8:5A:19:33:87:41:0E:45:21:EE
Certificate issuer:       /CN=083368cf-39a3-4ded-963e-7c89c343c8a2
Certificate serial:       010D0C9F432858457FDDDC65BD60598A27B6D2C0
Authority key identifier: 4E:7C:2A:D5:F0:5C:6B:56:C4:FB:BC:28:BC:15:52:78:15:3F:59:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/0b164b14-ac3a-3f60-bbdf-6468483bae70.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     55016
IP address blocks:        162.208.90.0/24 maxlen: 24
                          23.167.224.0/24 maxlen: 24
                          162.208.88.0/24 maxlen: 24
                          162.208.89.0/24 maxlen: 24
                          2602:fe1a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/083368cf-39a3-4ded-963e-7c89c343c8a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/083368cf-39a3-4ded-963e-7c89c343c8a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:dc:65:bd:60:59:8a:27:b6:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083368cf-39a3-4ded-963e-7c89c343c8a2
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=37a22a4c-bb0e-4313-9004-43c12e5234d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:2a:f6:51:bc:35:62:4a:d6:7d:dc:3f:c6:
                    88:5c:7f:7b:86:22:59:f6:0a:67:65:1e:11:d4:12:
                    91:33:01:7d:42:e9:a4:9e:ef:ef:d0:d2:e1:d2:12:
                    a1:95:78:a4:30:98:52:2c:2e:5a:f7:1e:66:e9:60:
                    5c:71:5b:6c:3a:3d:82:fa:bd:75:70:71:e1:2b:c0:
                    e8:c7:3c:63:53:c4:49:74:4e:39:a6:ee:f2:de:38:
                    e0:b4:e8:24:ab:ab:41:35:5b:03:20:c8:dc:46:c2:
                    4d:cd:22:f8:96:0f:92:24:29:39:db:3a:5e:8e:f9:
                    1f:38:87:46:21:c6:6f:3a:34:67:01:00:c8:3f:20:
                    44:62:65:84:06:ab:ed:40:a8:20:c4:a4:17:a5:6b:
                    ed:f5:e1:51:d8:db:52:a1:d5:fd:47:2a:1e:7c:83:
                    dc:54:ca:f7:91:c6:dc:31:4c:2b:6d:d6:b9:52:cd:
                    ba:cb:37:86:25:6d:8b:31:92:74:4e:5e:66:f1:f4:
                    46:d2:95:24:b5:ed:93:99:1f:dd:8f:00:3a:a5:f5:
                    51:1c:86:d0:f4:15:b9:9f:24:8a:31:4e:2a:85:22:
                    d7:43:37:03:2c:22:b0:c4:6d:0d:db:f6:57:d6:78:
                    84:d1:6d:3c:76:a8:b6:5c:7f:df:d0:78:24:20:ca:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:EE:B0:2B:66:CC:3A:04:57:D8:5A:19:33:87:41:0E:45:21:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/0b164b14-ac3a-3f60-bbdf-6468483bae70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2/083368cf-39a3-4ded-963e-7c89c343c8a2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:7C:2A:D5:F0:5C:6B:56:C4:FB:BC:28:BC:15:52:78:15:3F:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/083368cf-39a3-4ded-963e-7c89c343c8a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.224.0/24
                  162.208.88.0-162.208.90.255
                IPv6:
                  2602:fe1a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:6e:8a:5c:8c:f6:5b:f3:d2:a5:b3:26:3a:e7:0b:ec:df:
         c6:a5:94:3e:81:ac:7a:41:cf:a4:73:00:12:fe:f7:18:90:e1:
         a4:8f:09:10:d2:c4:5b:1f:32:32:c8:f8:e0:34:ee:f6:11:06:
         67:85:43:8d:a0:ef:de:8b:31:6e:9d:7e:30:02:e3:ca:28:19:
         c1:4b:ce:e7:51:19:ca:05:77:9f:de:d4:7e:3e:e5:17:78:96:
         fd:9f:12:37:49:b8:d1:11:a6:df:6b:8b:a6:e5:b8:20:97:2a:
         22:eb:86:21:97:30:9e:47:58:d6:b3:92:e6:16:95:06:07:69:
         dc:d3:f3:c3:fd:2d:85:54:2f:70:e7:a3:f2:f8:56:0e:a0:0d:
         3e:9e:05:c8:e3:8b:8a:35:b5:59:36:de:e5:5f:43:c5:ae:8d:
         ac:74:61:1b:7f:bd:9c:96:a9:a5:86:d0:a5:05:16:85:17:2a:
         78:32:d1:6e:28:6b:18:11:c7:c1:0e:71:77:e5:b1:d4:65:27:
         3a:6f:07:7d:87:bf:c2:1c:ad:0a:3c:c7:e5:03:04:d8:b0:2b:
         48:bb:ec:49:73:82:6a:db:2a:e2:49:9f:74:80:e1:c8:51:6d:
         93:61:29:48:3f:10:23:26:87:39:17:07:e9:25:9b:b2:9f:3c:
         32:f1:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:20:20 2024 by rpki-client on console-ams.rpki-client.org