Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa
File:                     fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa (raw, json)
Hash identifier:          JMfLKpczPPSji8VGkZKCBabLpIkrXeOJwgE4ttTrEUI=
Subject key identifier:   0A:A9:AC:5B:BE:D2:18:EB:D4:3F:E7:87:3E:B9:30:70:53:3D:92:D1
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F43285844ABCF8F623C60DBB0B361B128
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa
Signing time:             Thu 25 Jan 2024 14:00:29 +0000
ROA not before:           Thu 25 Jan 2024 14:00:29 +0000
ROA not after:            Wed 24 Apr 2024 13:00:29 +0000
asID:                     396982
IP address blocks:        208.56.0.0/18 maxlen: 24
                          168.245.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ab:cf:8f:62:3c:60:db:b0:b3:61:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Jan 25 14:00:29 2024 GMT
            Not After : Apr 24 13:00:29 2024 GMT
        Subject: CN=42982876-1d96-4199-9d3d-1ac548750fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:ea:26:65:c9:08:fb:02:a7:ea:4b:a2:66:
                    55:7e:ff:91:63:6b:02:6f:fa:bf:45:05:c5:1e:0e:
                    de:75:3c:00:be:17:12:2f:58:9d:5e:31:e4:15:81:
                    d8:78:ab:c6:b4:80:4b:a6:72:83:d3:b9:75:bc:06:
                    b5:17:a9:3c:37:b3:5c:49:89:47:d6:dd:0b:0b:0a:
                    8e:b9:af:19:cf:37:23:cf:a7:17:f3:a7:99:e3:fa:
                    8e:2c:05:8b:83:0a:e2:b9:39:3d:63:f9:a0:f6:87:
                    89:72:0a:11:57:70:1f:d5:8c:e0:fd:71:f4:7e:26:
                    f1:61:ef:6d:93:2b:30:84:38:c8:12:ec:3f:66:de:
                    2b:01:da:2d:da:86:0d:24:80:dd:5a:92:a2:ff:2f:
                    7b:0d:25:ca:e6:a7:ed:96:59:f0:49:cc:2e:43:47:
                    31:bc:d3:76:79:f2:03:de:a5:63:fe:d6:fc:db:61:
                    7a:df:c0:4f:32:90:5c:ab:07:b5:15:c3:ed:cb:39:
                    d2:13:75:d6:36:e0:28:eb:08:c0:13:7b:2f:91:de:
                    86:be:3a:d7:10:06:af:1c:27:97:5a:8b:f1:af:1e:
                    93:cd:69:fe:b0:aa:da:01:70:0b:11:ad:a1:5b:85:
                    17:8b:bc:22:47:8f:5e:e7:00:91:bd:69:6f:3e:a3:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:AC:5B:BE:D2:18:EB:D4:3F:E7:87:3E:B9:30:70:53:3D:92:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:98:2f:d4:34:51:40:4f:ef:00:5f:94:90:e0:bd:5f:80:
         e2:3a:53:be:b5:36:aa:58:d5:d0:f4:d9:62:16:d9:69:04:72:
         8c:d9:24:fe:b1:46:1e:df:81:07:cf:43:33:cd:c7:0a:40:f0:
         07:6d:75:8d:1a:e6:40:b2:51:97:b5:c2:02:d4:f6:02:e7:e2:
         64:cd:77:24:2b:95:f2:4f:a8:5f:60:e4:59:84:00:c1:b4:ee:
         19:a9:3c:d3:bb:9b:54:53:a6:c7:3d:34:da:7d:e4:d3:f0:75:
         e3:c0:9f:fd:c9:9d:11:ba:99:cb:e2:8c:35:44:84:3a:cd:32:
         c9:8d:0c:21:85:fb:2d:90:0b:10:db:59:bf:1c:bf:03:e2:5f:
         9d:4c:ad:1e:9c:67:67:9d:fd:38:a6:b3:8e:6f:18:0e:7e:62:
         06:a6:3d:46:6f:f8:6b:30:2d:fa:91:de:aa:56:64:8e:c4:e0:
         9b:e6:4f:dc:b0:e9:ee:71:33:86:70:39:0e:95:4e:89:ad:77:
         93:46:4c:37:5c:cd:c7:32:a6:4e:a8:79:34:c2:8b:0b:d0:49:
         bd:eb:d6:2e:94:ad:b8:a9:19:d5:63:f0:a7:81:fa:56:a3:06:
         a3:06:36:89:e2:b7:aa:af:63:57:15:af:6a:15:d5:84:11:71:
         59:2b:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:45:00 2024 by rpki-client on console-fra.rpki-client.org