Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa
File:                     cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa (raw, json)
Hash identifier:          yafqf8nGdtE8CKCU6u17YWMrqQzo5TysTf1F+3iAlCQ=
Subject key identifier:   82:12:0F:B3:15:78:6B:92:15:51:17:B0:1C:74:20:4F:1A:D2:6F:75
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F43285844C655065C3B72540251342A40
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa
Signing time:             Sun 04 Feb 2024 02:00:25 +0000
ROA not before:           Sun 04 Feb 2024 02:00:25 +0000
ROA not after:            Sat 04 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        216.230.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c6:55:06:5c:3b:72:54:02:51:34:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: Feb  4 02:00:25 2024 GMT
            Not After : May  4 01:00:25 2024 GMT
        Subject: CN=c7f4fc88-a353-4901-af5e-70fc1f511bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:3f:75:ff:da:15:b4:32:a4:b3:ab:b4:ec:
                    ed:b3:05:9a:87:6c:d1:d8:ef:65:3f:68:f4:1a:7c:
                    fb:70:d7:cf:67:91:79:33:5b:7b:3b:8c:80:bc:f4:
                    54:ab:54:6c:54:d7:93:45:cd:50:14:72:6e:83:ec:
                    15:f9:10:23:a8:23:95:bf:73:0e:9b:6e:c1:5d:f7:
                    48:aa:93:6e:98:f8:0e:f4:4f:50:65:93:ec:42:ba:
                    ce:2f:8a:8f:26:92:24:03:49:d5:ea:c2:71:e3:d0:
                    42:c7:ab:b7:5d:4f:ed:45:4e:1c:c3:41:f5:49:13:
                    43:ba:6f:7b:f4:97:cc:20:a0:3a:ad:f5:51:e1:ab:
                    93:d0:b9:60:86:73:c1:06:0f:1a:a7:0c:8b:d6:a9:
                    5a:9a:02:f2:ca:5d:80:39:9f:92:a0:5f:a5:d6:08:
                    65:7d:f7:04:36:de:2b:ec:c5:87:9d:8e:04:d6:5e:
                    9d:42:7e:42:0f:45:5d:20:f2:5e:d2:8b:a8:df:f7:
                    c1:0c:9f:09:52:ba:1e:33:aa:f1:09:6f:ac:68:69:
                    5f:fd:8a:05:99:6b:89:d5:56:1e:24:81:4a:eb:9c:
                    5b:82:81:e2:fa:8f:d5:fc:dc:9f:23:b6:03:50:d4:
                    89:6e:12:b8:46:f1:83:55:ea:99:21:e7:e3:45:d2:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:0F:B3:15:78:6B:92:15:51:17:B0:1C:74:20:4F:1A:D2:6F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/cd8d28b4-9fab-3f86-89d9-e873b6c3f7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:37:ba:71:1f:ad:02:28:c9:c4:a4:7b:93:6b:92:a1:32:aa:
         d7:65:60:41:e1:43:2c:76:44:55:5f:6a:cb:38:f8:9b:c9:7a:
         3b:3b:1f:bb:14:ec:f5:de:30:07:50:e4:c9:d9:1b:99:c8:29:
         cf:38:ad:31:2a:d2:d2:94:07:e3:24:1a:e5:c7:95:85:fb:1c:
         36:82:8f:82:cb:97:cb:e2:a9:f8:17:5b:25:a7:37:fa:1b:fa:
         c1:5a:79:7d:6a:c3:8b:00:45:ae:aa:41:e2:2d:bd:ae:d8:df:
         e3:7a:db:9e:74:8c:e4:88:c2:b6:92:53:55:69:42:1f:de:3e:
         50:e2:00:cf:01:d5:9a:05:2d:32:a4:25:aa:ef:d4:cd:0c:7b:
         b9:de:95:d7:a6:91:4b:36:0f:7d:a8:b2:18:00:3d:4f:fd:a6:
         8d:97:be:2c:11:38:ee:dc:22:77:1c:dc:2c:d5:09:6e:3b:6f:
         22:35:6f:32:50:88:da:f1:3f:c5:e3:19:df:18:71:3a:05:e1:
         d0:e6:71:31:2f:56:1f:1c:6a:33:77:f7:4b:54:6c:6d:dd:7a:
         15:e5:05:01:ea:20:5f:d1:fc:57:26:dd:8d:ad:a9:23:36:70:
         57:e9:81:e9:15:4e:03:01:8b:f6:bd:3b:6b:10:a5:2b:ea:c5:
         03:ae:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:29:16 2024 by rpki-client on console-ams.rpki-client.org