Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
File:                     ea2b8f6b-1d68-3288-867f-4922b4a39175.roa (raw, json)
Hash identifier:          cVMSTyWG4lI4EQuT+2dz/1imMFKLyi/DPN1wwHzzfYs=
Subject key identifier:   3A:5B:73:EA:6F:57:95:E7:CB:F9:CF:9B:24:69:16:C4:88:C3:7C:B3
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F432858457D132F54A65B14EE84F48E00
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     18875
IP address blocks:        216.20.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2f:54:a6:5b:14:ee:84:f4:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=462054db-c98b-45dc-a16c-b6d8d9b03ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:bc:3e:7f:53:e3:55:c3:6c:a6:c3:1e:80:
                    ca:89:a5:95:e6:02:71:24:0d:d3:e5:fe:31:96:8c:
                    c8:bc:f2:f8:26:f3:4e:12:32:c4:54:b7:b3:6b:ea:
                    ab:35:98:68:da:8e:88:2e:b9:99:a1:63:0d:ce:02:
                    22:ed:70:7c:bd:50:0e:4b:67:67:70:e4:00:28:a8:
                    a1:3e:6b:b0:68:35:45:cb:c2:25:6f:7b:a1:44:18:
                    11:19:d6:85:e1:c8:f9:eb:a7:a8:54:55:91:9a:ab:
                    48:56:8c:4c:6b:85:32:b0:9f:39:5f:cf:b1:ad:21:
                    dd:30:22:27:c0:53:b9:63:2a:89:09:7a:9f:9d:c7:
                    84:ce:e8:2b:bf:c2:a4:02:ee:4a:53:a9:65:fb:15:
                    fd:b2:c4:2f:1a:aa:72:e3:c2:bc:f6:bf:64:a7:e7:
                    02:7f:73:41:32:6f:c2:5c:0f:95:91:7d:d4:41:f3:
                    b4:88:a7:fd:9f:c9:85:27:b5:15:17:d8:52:f5:c3:
                    dc:7d:cb:45:5d:63:e1:c2:5a:18:fc:65:b0:45:7a:
                    99:21:82:1d:dd:c7:55:0b:73:c1:99:5f:35:af:13:
                    8d:d5:b7:12:fc:8e:8d:4b:05:0d:b1:2e:45:9f:23:
                    2e:93:14:85:dd:f9:72:cc:cd:fb:91:ac:01:13:75:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5B:73:EA:6F:57:95:E7:CB:F9:CF:9B:24:69:16:C4:88:C3:7C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:71:eb:93:63:37:42:5c:05:72:7d:8c:56:2c:c4:af:d1:f0:
         90:b7:ac:66:31:32:59:72:82:71:d6:1f:2e:61:f2:3e:b2:70:
         b6:9b:59:0f:d7:2f:ab:17:1a:d5:0d:41:8d:b8:c8:1d:6c:5f:
         c0:a1:b7:2f:3d:00:62:c3:da:37:ce:fb:f4:8e:10:fb:b8:e5:
         9b:69:d3:c8:4a:03:b5:cd:5e:78:51:db:9a:52:9d:b7:af:b5:
         dd:08:e5:9d:6b:53:59:ec:0e:ef:4e:35:bb:ce:81:d7:f5:e5:
         b0:dc:46:9d:a3:04:ce:2f:d4:78:0c:56:9c:36:f9:af:2d:4f:
         ae:16:27:28:22:a7:c1:be:f9:c3:e4:f3:e0:40:47:33:01:b7:
         a8:ff:31:24:f7:9f:02:82:37:06:df:6c:d0:6a:f4:49:f0:92:
         40:20:32:0b:93:9a:45:9a:8b:1e:60:9b:a2:0e:7d:3c:b7:43:
         2e:97:dd:09:5c:25:c1:fe:86:77:0f:b4:46:08:17:03:9b:b7:
         e0:d3:4b:71:ba:66:ea:1a:ef:d5:e6:9a:17:12:46:b8:5b:32:
         d9:4c:7c:f9:fd:46:01:43:af:5b:c0:5a:08:01:22:47:95:b0:
         53:54:94:a8:bf:fa:03:69:3a:f3:30:df:62:70:30:b4:18:29:
         c1:b1:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:31:51 2024 by rpki-client on console-fra.rpki-client.org