Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa
File:                     e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa (raw, json)
Hash identifier:          mlhJZKOXzcbmdoDyn3xcz9XFHmwbS/sG+PoZhmWUb40=
Subject key identifier:   2C:D0:90:E8:43:06:EE:00:EE:0F:98:33:3D:60:63:E7:98:72:BA:33
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F432858455F378475EBC25E09D87D7C40
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa
Signing time:             Fri 29 Mar 2024 20:19:44 +0000
ROA not before:           Fri 29 Mar 2024 20:19:44 +0000
ROA not after:            Thu 27 Jun 2024 20:19:44 +0000
asID:                     216145
IP address blocks:        100.42.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:37:84:75:eb:c2:5e:09:d8:7d:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Mar 29 20:19:44 2024 GMT
            Not After : Jun 27 20:19:44 2024 GMT
        Subject: CN=9b1a175a-a562-4a03-9616-0f3d5270947b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:de:bf:df:6b:89:3f:4c:ea:87:15:7b:f4:
                    b8:dc:72:78:ca:91:a7:67:e0:d3:b4:4e:33:c3:c1:
                    9c:95:38:79:b5:36:b0:43:ad:01:9b:f6:57:1d:86:
                    fc:75:55:96:21:03:c2:32:5e:f6:d6:f9:17:93:cd:
                    e7:72:6b:5a:5e:55:84:57:e4:83:79:75:e3:7b:a1:
                    35:c7:3a:4a:a3:c6:f9:1c:2f:79:ae:ad:db:f4:ae:
                    19:45:36:30:f9:dd:38:5d:b0:d7:38:46:0c:c7:05:
                    27:65:d4:64:e3:da:57:89:35:fd:eb:7a:6a:e3:30:
                    28:d9:49:da:e9:60:49:22:2a:35:40:54:a9:94:e3:
                    f6:35:a0:85:95:c0:88:16:6e:58:de:85:19:c6:2f:
                    52:94:12:79:c4:61:95:16:40:23:32:41:c6:fb:f5:
                    48:d1:85:84:24:67:9e:5f:e8:6e:09:be:79:3a:de:
                    8b:a1:52:19:c4:fd:f0:ea:48:64:8f:76:0a:b1:53:
                    e1:6c:8c:d3:4b:61:df:b0:8d:fd:af:65:9c:84:d6:
                    8f:bc:67:f8:95:44:a2:0c:39:4d:61:e4:cc:05:e0:
                    ab:aa:4b:86:2c:85:d9:cb:b6:e0:52:83:31:2c:0e:
                    dc:30:dc:44:33:dc:50:ec:cc:ff:69:02:7f:98:0a:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:90:E8:43:06:EE:00:EE:0F:98:33:3D:60:63:E7:98:72:BA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/e379d600-38fc-3e5e-b35a-4c1eb40fc524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:cf:6b:5a:c1:b5:64:df:fe:7e:27:05:a8:bf:25:a4:91:43:
         2f:27:9e:51:e4:bc:e7:6b:ad:a6:94:7c:87:66:6c:33:b1:6b:
         bf:10:e4:ea:61:bf:37:87:36:64:24:b0:cf:6d:2b:cf:e6:d5:
         11:59:ba:64:d7:50:e2:5a:c6:56:20:94:5f:69:7d:7a:53:3f:
         8f:55:28:b1:26:15:6b:b3:7b:1c:8d:ec:84:53:23:7b:fd:75:
         09:88:e3:4d:c3:a8:72:12:86:d9:43:81:1b:fa:a7:c2:77:e5:
         55:7b:ed:23:56:8b:98:4a:c7:f2:d4:9c:43:fd:f6:b5:1f:1a:
         72:83:00:1f:48:4e:76:2a:32:2e:12:45:48:db:08:1f:28:0b:
         2e:17:1a:4a:71:19:4d:d2:b4:72:fd:5d:59:51:89:e3:89:28:
         e3:3f:30:86:18:f7:16:5f:41:92:32:40:7a:d9:98:dd:86:ec:
         07:af:50:d9:f5:d6:05:d2:1a:e1:9f:ed:39:75:e5:b5:e4:88:
         89:1c:4a:81:51:1c:ce:b2:49:45:a0:90:5e:39:ac:f7:70:24:
         d3:fe:6e:fc:4a:4a:1c:98:86:6a:6e:9e:e4:a5:db:f3:03:fd:
         3d:d2:50:ca:ab:65:70:f4:39:71:55:66:84:35:e1:5f:d6:a4:
         63:ed:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org