Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa
File:                     b8a6959c-b405-3a36-9378-5743d5d51313.roa (raw, json)
Hash identifier:          iQ9I/gpi+zPiNn0OT5hEmxG3WaJadIo+b+ti1VBYBLE=
Subject key identifier:   CA:90:5D:A5:7C:63:C7:05:0A:69:DA:AC:6A:12:16:1B:94:63:71:74
Certificate issuer:       /CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
Certificate serial:       010D0C9F432858455498223C380DD0430A32BE40
Authority key identifier: F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        216.120.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:22:3c:38:0d:d0:43:0a:32:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=46ee930f-5242-48d3-99a4-71661169f32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:95:ff:6d:6f:00:75:ae:b7:a8:59:58:b0:
                    e7:9b:32:04:74:8c:46:98:36:2f:9a:53:90:e5:54:
                    43:19:30:6b:41:75:74:91:cb:dc:da:79:38:63:f0:
                    ff:37:8f:11:08:90:26:29:b6:1a:d9:cc:3d:91:7b:
                    84:e0:ff:83:a8:93:e0:6e:aa:03:6d:62:52:84:56:
                    a3:86:d6:d5:8f:69:e4:1e:c7:4f:c9:60:ec:46:7d:
                    6e:b4:f8:c0:3b:a7:73:a3:ea:6a:14:6b:80:b5:91:
                    8c:d5:56:60:b1:e9:22:6b:21:1f:fc:eb:c7:7a:25:
                    f6:c1:f0:af:a9:da:80:0f:45:46:56:6b:15:f9:44:
                    42:25:8d:e8:dc:03:0c:1c:7d:60:32:50:4e:3c:06:
                    39:4e:75:41:5d:8e:3d:29:bd:d7:42:95:98:9a:89:
                    44:55:69:22:ee:01:71:ab:81:a9:90:2c:45:09:e8:
                    0d:e0:00:78:21:86:aa:5e:01:b4:fa:1b:23:97:d9:
                    18:d7:ed:4a:40:39:cc:56:a7:87:67:1a:f5:96:0c:
                    da:47:e4:92:92:87:87:df:9b:dd:a1:c7:87:86:a7:
                    a4:9f:f2:b7:bb:0c:fc:b2:14:c9:37:74:7e:24:f0:
                    20:a1:1c:70:97:95:8a:25:dc:2d:d9:1a:d2:ce:34:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:5D:A5:7C:63:C7:05:0A:69:DA:AC:6A:12:16:1B:94:63:71:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/b8a6959c-b405-3a36-9378-5743d5d51313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl

            X509v3 Authority Key Identifier:
                keyid:F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:75:f6:6d:b3:88:60:09:62:a8:e5:8a:ef:c4:48:ef:c1:
         0a:b5:e9:35:f1:98:3d:e1:c1:b9:cd:22:21:dd:41:d3:a9:e3:
         8a:a1:33:78:75:52:7d:02:d3:a7:c4:d9:77:ba:51:b3:85:ec:
         99:c0:45:b6:15:0f:d3:3d:01:d1:d3:b4:32:57:4d:14:25:f4:
         34:1c:d2:68:c8:dd:48:d3:10:1a:de:12:53:70:0d:92:e2:28:
         c4:d7:fb:ae:de:cd:f5:9a:44:18:f1:86:31:2a:6e:ec:ed:7a:
         62:6d:34:07:6b:05:2e:2e:41:f2:bc:ab:33:3f:b4:dc:35:29:
         a7:24:86:ea:bd:71:41:16:66:36:7a:33:b6:76:69:e7:c7:50:
         57:bb:19:a7:9b:22:81:14:5b:c4:0f:11:9d:8d:fb:26:bd:53:
         d7:5f:65:61:71:5c:0c:eb:b1:e2:c3:08:bc:82:bd:31:7b:ca:
         03:55:82:69:1a:38:b8:ff:75:84:53:87:8c:9d:97:e7:6b:7d:
         26:91:ae:bd:f4:15:a6:28:35:36:4c:5b:aa:45:52:ba:cd:de:
         3e:91:29:53:de:0b:d4:66:b0:45:35:04:53:3f:54:52:b3:63:
         f6:16:dd:7c:ce:dd:23:3e:cb:87:ea:fa:9c:18:b1:82:16:e4:
         8f:b6:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:03 2024 by rpki-client on console-fra.rpki-client.org