Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa
File:                     b71fd3b6-e613-3656-a391-8b75c5193bfb.roa (raw, json)
Hash identifier:          oSSgqPC2bmQDw3cGVWrOO/vc1o9M5EOKJd7QUMzehww=
Subject key identifier:   B8:1F:F0:04:64:99:AA:48:91:29:09:0A:A8:55:65:88:B3:6B:F6:EC
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F432858451CE03585BF1D4DC45435BE00
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     14041
IP address blocks:        216.38.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:35:85:bf:1d:4d:c4:54:35:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=6116dfa8-20c0-4973-af90-a8a092c6cabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:dc:65:b7:f1:ee:13:09:47:ec:21:b3:9a:
                    da:86:0e:15:25:15:05:cf:4d:14:3a:d9:87:aa:b4:
                    3b:97:d8:97:b0:c7:ee:c2:cc:7c:99:3c:ef:cd:ad:
                    94:68:fb:3c:6d:72:ae:f9:8b:7e:a2:47:f1:53:88:
                    40:0d:af:de:b5:d9:ec:bc:e4:0b:80:3d:65:58:f2:
                    1a:70:bd:5c:03:6e:01:97:32:49:93:3f:6a:66:6d:
                    d3:a4:07:38:dc:c2:08:ac:b6:9c:0e:52:47:a2:70:
                    7b:e6:08:77:2b:7d:9a:27:d4:76:d8:53:8d:72:d0:
                    d5:e5:72:a4:5e:53:84:16:c3:9e:49:56:85:38:8d:
                    8d:95:a4:15:4c:2e:5b:ed:16:25:78:43:f6:05:ee:
                    a6:21:04:cf:79:c7:6a:eb:af:5f:db:40:9a:62:88:
                    06:93:0d:9f:2c:36:b9:4c:06:e9:1e:61:ce:a4:75:
                    84:58:65:61:9e:36:bc:74:db:0f:df:49:5e:44:44:
                    cb:63:2f:fd:73:3d:94:8c:8b:c5:d8:2a:7f:b2:35:
                    da:8e:40:2c:f3:20:76:2f:0d:86:fb:b9:f6:3e:33:
                    57:ec:b5:46:94:e3:fb:b6:e3:9d:df:f3:84:b9:44:
                    48:09:10:86:74:81:47:20:5e:20:d0:f8:65:ab:e7:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:F0:04:64:99:AA:48:91:29:09:0A:A8:55:65:88:B3:6B:F6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:95:92:33:18:a2:c5:e0:30:d8:f9:ab:62:23:97:4c:46:75:
         fe:30:56:f0:b7:3d:b6:0b:f4:09:a6:2f:4f:6d:87:b3:b9:cd:
         4f:22:e4:c2:2e:c3:78:b6:23:24:87:d8:f4:9a:4e:60:9b:fc:
         45:a8:c1:82:c5:1a:e1:a8:0b:f5:eb:50:2e:3f:0c:24:51:83:
         6d:ff:2d:a9:63:be:00:7d:d4:3c:8d:9f:6d:99:bc:6c:b6:6c:
         61:7c:a3:67:cb:64:64:a6:a9:1c:3b:77:56:84:5f:3e:79:86:
         f5:a2:af:9c:4b:a7:6d:b7:fd:73:64:8b:57:da:a8:25:57:01:
         b9:e3:79:ae:17:21:54:eb:58:eb:16:4c:47:5c:19:2b:bb:cc:
         18:a0:5b:cc:d2:88:b5:0f:81:cb:fd:2e:4a:8d:02:ad:50:a2:
         bd:34:d4:e2:50:ab:0d:f5:97:1f:23:3e:33:cb:8e:75:eb:5d:
         60:58:60:25:d5:a0:dd:a6:3d:d3:30:7e:63:23:ba:7b:32:59:
         4a:e9:7f:76:fd:27:49:5c:96:bb:fd:e5:dc:b5:71:63:de:09:
         61:d5:d2:24:ca:bc:7b:3f:1a:53:14:5b:64:5f:bf:ec:9b:bc:
         1d:c2:46:f7:8f:a8:54:af:ac:d3:89:de:5e:ce:03:3b:01:0e:
         03:67:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:01 2024 by rpki-client on console-fra.rpki-client.org