Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
File:                     1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa (raw, json)
Hash identifier:          NEE9xB4VcJ7eTijI0oKGb7hUYDC0++DOGoNBATLpMTg=
Subject key identifier:   1D:13:53:95:08:7C:79:C4:17:35:CA:82:E1:01:BE:3E:9F:5A:5C:AB
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F4328584582A899B65DE584F55C7D40E0
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     25875
IP address blocks:        69.165.96.0/20 maxlen: 24
                          208.88.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:99:b6:5d:e5:84:f5:5c:7d:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=f043e7a4-72e1-4803-a675-84a40fccabb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:35:f1:6e:0a:a1:0f:7a:45:3a:96:85:8e:
                    e0:b6:81:c9:44:f4:52:54:c1:31:cd:68:02:cc:a4:
                    c5:41:ac:6b:61:e4:22:6d:50:ba:ad:a3:a5:6b:84:
                    14:e1:0d:35:42:8b:bc:a8:f0:f4:9e:32:17:e6:cb:
                    98:47:d5:22:7d:40:0e:62:ab:6a:c8:59:26:e4:64:
                    6f:d2:8e:08:a3:7c:80:75:ab:43:07:40:e0:7a:dc:
                    07:98:3f:dc:aa:6e:72:75:82:f9:79:44:74:b5:5f:
                    15:f5:4e:73:6c:1b:a7:12:bb:22:8e:15:ef:0e:a0:
                    c7:f5:d3:c9:b2:06:29:b0:62:71:ab:06:0b:02:33:
                    89:2a:5d:cc:e3:d5:9c:35:fe:21:f9:19:6e:7e:7c:
                    3b:e2:1b:d2:bb:f0:ae:54:4d:69:ad:99:66:56:b5:
                    92:a9:58:bb:3d:02:2d:1a:de:2c:90:31:2c:44:05:
                    6c:d3:62:fe:a6:47:c9:c0:ad:b8:0a:d1:4b:87:b0:
                    a0:ee:c7:a4:23:a4:81:14:5c:f8:2a:82:ff:94:f4:
                    6c:46:69:29:a4:15:dc:09:a0:fd:3c:3c:99:e2:0a:
                    8c:4e:0b:3f:26:dc:b2:bd:f0:a7:d8:ca:4d:be:0f:
                    00:d6:7e:88:8f:e5:92:55:f4:24:a9:32:29:34:ae:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:53:95:08:7C:79:C4:17:35:CA:82:E1:01:BE:3E:9F:5A:5C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.96.0/20
                  208.88.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:d6:5f:03:ad:bd:3f:e1:97:10:e9:b9:22:6c:e2:bb:af:
         22:0e:dc:16:30:51:06:80:92:93:73:6b:8a:6d:24:f2:00:dd:
         8a:a7:35:86:20:0d:49:33:9c:6b:76:48:75:db:6c:cc:2a:ca:
         93:e6:ca:98:47:ae:84:b3:d5:d9:7b:e8:d5:ed:00:59:db:dc:
         bd:1c:da:fb:18:a3:2a:a5:79:96:4e:16:1a:94:a8:2d:07:27:
         16:5f:72:62:bc:a9:ad:89:4d:2d:9b:72:23:93:90:6c:9c:2a:
         1a:51:d5:26:50:79:5f:46:e5:2d:56:eb:38:4d:6d:f4:07:d3:
         eb:92:c6:b5:75:c3:ee:82:85:7c:cc:e7:69:59:97:ef:35:2f:
         df:24:cd:04:f5:ab:4d:d1:e9:3b:59:61:9c:2b:cf:0c:c9:4b:
         d2:4a:df:68:be:17:0a:09:a0:e7:71:3e:5b:d8:7d:87:86:8a:
         04:63:bd:b3:41:d2:e0:3d:e4:66:dd:dd:0a:28:33:13:f1:a7:
         ae:60:f3:31:5d:c1:d2:c9:ea:d9:54:c5:66:85:99:d1:ec:5d:
         4f:b0:02:8c:b7:a1:9e:fe:ea:bb:fc:82:30:5d:b7:7c:ae:e4:
         cc:2d:a1:bb:a4:c1:73:00:4e:59:a0:f7:ae:64:ad:12:cd:97:
         ed:dc:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:36 2024 by rpki-client on console-fra.rpki-client.org