Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa
File:                     0289596d-80f8-35c4-b20d-9d576f2262cf.roa (raw, json)
Hash identifier:          Qivuj3ElKtWDYpfl5loZGfUPc+8uP1YI5ARHokJX7tk=
Subject key identifier:   95:56:9E:60:90:15:09:B8:AA:38:7A:C0:15:78:E1:E6:C5:63:19:BE
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F43285845734DAC6A0F7C5F66BBA9C980
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        216.230.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ac:6a:0f:7c:5f:66:bb:a9:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=e5cf4671-17bd-4a4d-a4c8-8913f6e1391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:fd:f5:29:72:48:4a:a6:d2:76:49:ca:fa:
                    35:5c:f4:2b:41:e3:5e:3a:78:a6:69:6b:a4:6c:64:
                    dc:a5:a1:08:49:33:5a:62:ed:ac:6f:85:de:70:f0:
                    a9:65:d1:f5:64:9f:ee:bf:a8:2b:3e:40:55:aa:37:
                    d9:1e:6c:91:3d:31:3e:52:67:39:54:99:ca:4b:33:
                    c0:b2:2a:db:17:d5:ef:b8:dc:5b:4c:a7:dd:05:66:
                    32:31:b8:87:41:13:45:ec:37:1d:25:32:18:91:e4:
                    2e:b9:0d:d1:04:f3:5d:e7:a6:c9:84:cc:2f:2d:e0:
                    2f:47:87:3a:9e:31:91:c6:c3:19:6c:36:62:56:93:
                    07:a9:ce:28:1d:05:4b:52:56:3b:eb:10:7a:98:2c:
                    a5:da:6e:98:16:98:f3:57:f8:f7:79:6b:ff:64:80:
                    b9:6f:09:b2:b2:ed:e5:f4:b0:05:4e:ec:d9:54:24:
                    9a:af:dd:fd:4f:28:cf:c2:96:a2:c8:03:23:58:7f:
                    0f:71:ae:da:66:f7:6f:f8:2d:53:61:91:fb:59:f0:
                    26:d0:0d:e7:15:ad:13:e1:8b:22:a4:63:be:d3:96:
                    2a:3f:f5:54:fa:7a:81:37:82:f2:8a:30:19:0c:55:
                    d0:1e:20:b6:5f:ee:80:ab:45:bc:7a:32:64:4f:db:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:9E:60:90:15:09:B8:AA:38:7A:C0:15:78:E1:E6:C5:63:19:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:72:74:fa:a9:2b:27:e2:1c:bb:d2:75:e0:77:af:25:cc:7a:
         71:3e:8e:bc:29:95:93:ea:75:1e:d4:3d:40:7e:28:45:b3:ae:
         38:98:a2:c2:af:f6:9e:a7:62:6c:df:06:9c:d2:9c:0a:7e:4e:
         dc:a2:45:68:11:e7:7b:bc:96:b3:6c:63:c6:00:8f:9f:3c:cd:
         1a:ad:9f:77:0e:c5:c2:be:4d:0d:bf:e1:a8:f7:e5:61:37:e8:
         da:68:aa:f6:3e:d7:1f:ae:16:60:19:00:80:a2:69:5e:56:15:
         a7:71:7c:69:40:ab:45:86:cc:01:74:ba:b8:c5:58:6a:35:84:
         de:6b:fb:62:36:8d:3b:4d:0f:4a:d4:b7:b8:3c:aa:0b:1b:bc:
         69:af:70:90:10:b2:7b:c3:ea:bd:4d:f7:cb:32:d4:ee:06:86:
         d9:fa:78:25:cb:29:24:b3:ee:57:c0:c5:46:7a:38:fe:27:39:
         11:c2:e5:66:68:fd:c0:04:9e:93:5a:66:f2:f1:3c:25:de:64:
         2a:30:75:8e:db:b7:2e:29:40:24:48:f8:eb:cf:4d:f5:9e:8e:
         67:0d:6e:5c:8b:16:b5:d0:12:75:48:69:4a:3e:6a:56:e1:7e:
         f1:45:8c:cd:31:9d:f0:e2:ff:e2:50:bc:3b:7e:6f:37:80:64:
         a4:41:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:54 2024 by rpki-client on console-fra.rpki-client.org