Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
File:                     81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json)
Hash identifier:          eJzlq5UiEE63MDU0C68UxxuY9AC1tU+I+XUuTt8vLaY=
Subject key identifier:   10:B7:4E:D1:8B:FF:14:16:6A:A7:A6:3F:4D:E7:CE:7D:B4:7B:08:CA
Certificate issuer:       /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial:       010D0C9F43285845A428D252FDC265764BA6EF00
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     40339
IP address blocks:        206.71.154.0/23 maxlen: 24
                          208.78.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d2:52:fd:c2:65:76:4b:a6:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=cf40c891-80d3-4f72-a311-42bc0d3d70ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:3f:11:79:db:91:f3:b2:d6:8d:26:45:d4:
                    2d:fb:a6:c4:8d:d7:14:3f:84:2d:9c:46:fe:50:3f:
                    ac:57:39:33:cc:b2:63:47:51:02:ae:dd:18:62:4b:
                    94:c8:05:cc:45:63:1a:b3:cc:7c:da:5a:6c:e5:19:
                    92:2d:47:e3:4a:4e:a9:81:da:0f:bb:75:f2:87:67:
                    30:79:c7:d4:0f:c2:62:d8:bb:30:bc:cd:c6:0f:f8:
                    5c:ce:41:6e:69:7b:a0:e5:84:1f:dc:39:ea:5b:16:
                    83:f7:be:3b:f1:bf:eb:82:71:b1:41:ee:76:e5:c1:
                    a5:88:0c:ff:92:7d:a8:3c:93:87:30:d0:71:3d:52:
                    d8:c0:34:9d:b3:34:23:aa:35:ba:bc:85:ef:34:e8:
                    32:58:0d:e4:31:c9:3f:b7:6a:c6:f1:2e:e0:9d:93:
                    8c:a8:d0:f2:13:59:1b:7c:a5:d5:9e:74:44:d9:67:
                    d9:28:7e:39:3a:f8:30:de:43:c3:f5:f8:c0:00:18:
                    f2:a3:92:b9:06:b6:2b:d6:e8:a6:c1:4b:64:ac:3b:
                    6c:ce:64:1b:31:e4:fc:72:30:1e:4c:10:ca:93:4a:
                    30:a8:b6:e9:bf:cf:53:d8:59:63:65:a1:93:66:53:
                    be:ec:18:a6:46:4f:f8:d1:31:d3:04:d1:09:2a:f4:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:4E:D1:8B:FF:14:16:6A:A7:A6:3F:4D:E7:CE:7D:B4:7B:08:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl

            X509v3 Authority Key Identifier:
                keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.154.0/23
                  208.78.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:0e:d8:c7:c7:8e:fb:24:23:81:f5:e7:8a:a0:69:c4:dc:
         c6:ca:18:17:ee:c0:49:2c:54:ec:e2:09:b4:79:26:ec:78:45:
         c3:69:df:e4:fe:a7:f3:dc:80:14:a8:31:8c:de:a4:81:eb:38:
         c8:67:a4:55:e8:a0:94:9f:79:56:94:69:b8:91:f3:78:b0:fc:
         07:00:75:14:69:97:17:82:69:66:3f:c9:43:33:65:50:08:ae:
         75:52:1a:4e:40:e8:38:5c:55:72:d9:53:00:74:d1:d5:16:97:
         e7:1a:c0:e5:d6:5c:a5:74:7b:96:d0:94:1c:72:5e:ae:a6:62:
         3e:73:3e:9f:69:73:30:03:8a:86:94:24:8c:11:c9:62:2c:c8:
         f1:e0:41:e9:bb:ac:e8:bd:50:fc:9c:d1:ee:41:45:aa:f1:b7:
         be:71:1e:4a:0b:e6:dc:97:db:72:71:39:88:2f:8d:4e:99:05:
         0f:28:09:cf:10:63:93:56:02:c1:a4:7f:4a:17:5f:42:3a:ce:
         a6:5d:0d:db:cf:d5:4b:88:25:78:fe:67:cb:d2:69:b5:fb:06:
         5b:3b:01:4c:c0:4b:15:90:a8:2d:c8:bd:3a:7b:f4:86:9a:ec:
         4f:f5:e5:63:ea:6e:6a:07:e9:cb:04:a4:8e:c7:58:e5:05:d3:
         55:d4:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:36:57 2024 by rpki-client on console-fra.rpki-client.org