Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/64bcf7dc-18ae-3bec-a767-07e949b2b682.roa
File:                     64bcf7dc-18ae-3bec-a767-07e949b2b682.roa (raw, json)
Hash identifier:          1G3Ywa8yYtsDKYPoQsrFEqe3LHR4u+h1ADlYXdNvCyM=
Subject key identifier:   4B:3C:AA:16:F1:DE:E4:20:B7:2E:27:13:3D:19:43:A3:6E:85:C9:66
Certificate issuer:       /CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
Certificate serial:       010D0C9F43285841E46D3B9325071DC5B6E72250
Authority key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/64bcf7dc-18ae-3bec-a767-07e949b2b682.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 21 Jun 2023 00:59:54 +0000
asID:                     1239
IP address blocks:        208.82.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:3b:93:25:07:1d:c5:b6:e7:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 21 00:59:54 2023 GMT
        Subject: CN=a5f57109-49d8-4651-b8fc-463485ece1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:e2:3d:4c:1f:76:f1:73:20:a4:f5:0e:f4:
                    4f:57:55:5c:1f:41:48:b6:6c:18:27:94:dd:59:a7:
                    26:31:b2:48:fc:7b:ec:63:29:6a:4d:3a:30:6c:67:
                    ea:f7:d4:94:9d:5a:d5:88:02:9f:26:b5:18:25:20:
                    31:73:b2:f9:91:d8:31:9d:f9:f6:5d:04:33:d4:4a:
                    dc:8c:d6:d0:53:15:12:9d:2f:ea:f5:88:6e:42:cf:
                    42:e1:85:5b:fc:48:06:cd:8f:5a:30:9f:d3:b0:cc:
                    ab:e1:5b:a9:a3:4b:75:b1:bb:2b:dd:fd:01:07:da:
                    b8:1e:36:7c:e9:fb:07:56:aa:18:f1:2c:f4:47:55:
                    ae:55:23:5c:a2:0b:c9:6a:c2:9d:32:4a:ec:27:c1:
                    89:15:27:c8:c3:d2:3b:52:c4:48:11:17:b4:32:8e:
                    18:44:69:6f:4a:a7:86:05:bf:77:66:e4:79:5b:e1:
                    12:34:47:89:1e:5a:8d:e7:e1:dd:c2:40:74:86:44:
                    c8:99:7f:eb:56:2b:75:3c:c0:95:40:d8:46:62:e2:
                    22:7f:35:d7:e6:4a:04:1c:f8:48:d4:3c:2f:bf:a7:
                    c7:ab:10:9e:0b:12:d5:ce:24:a4:48:af:10:a5:9d:
                    1c:ed:1f:f8:09:75:ff:17:48:d6:3b:a0:79:42:f8:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:AA:16:F1:DE:E4:20:B7:2E:27:13:3D:19:43:A3:6E:85:C9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/64bcf7dc-18ae-3bec-a767-07e949b2b682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:af:36:66:20:08:af:c2:e2:5d:85:12:3d:0c:d3:c8:51:62:
         14:25:84:68:a5:68:b8:70:bc:4b:5b:0d:a1:4c:14:ca:ee:ea:
         e9:94:3e:2a:5a:36:f2:78:e0:5b:9b:00:1a:ff:dc:7a:d0:7c:
         51:03:31:22:e3:99:79:e4:a3:83:36:fe:86:9e:3a:8e:63:92:
         9a:34:e6:9f:d1:52:75:b4:0f:b7:b4:5c:d9:29:54:d9:ec:85:
         9d:53:d4:0f:0b:77:c2:75:45:ec:61:cd:8f:25:52:4c:22:68:
         f2:95:d3:05:c3:eb:ca:fd:42:9f:c9:35:5d:0e:18:47:f0:1c:
         7c:66:06:87:46:71:09:6c:af:3b:e4:28:aa:f0:a7:62:3d:25:
         ac:7a:a8:fc:d6:4d:fb:65:fe:41:e8:7d:1d:c8:ee:91:0d:ef:
         fb:2a:5b:6e:c7:98:a1:0b:a7:0b:6a:fd:9c:08:9c:b2:8a:9e:
         1b:d8:67:ef:ef:27:1a:1c:95:08:8a:f5:43:83:b4:21:da:10:
         ba:2e:f2:a0:98:b6:ef:a5:69:24:c1:fb:96:8b:0b:17:f7:2d:
         8e:e8:f0:8b:7c:01:da:0d:e8:5c:05:72:0f:26:1f:9a:18:14:
         2b:8a:8b:9a:c0:74:73:fb:c0:3c:1c:cc:d9:39:cf:d7:b2:0c:
         ef:ae:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:44 2023 by rpki-client on console-fra.rpki-client.org