Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
File:                     7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa (raw, json)
Hash identifier:          zlNWhC6lartGaTYqbTjCnB5EN/QqfUfCaTpsm7WEg0Y=
Subject key identifier:   FA:2F:2F:D9:07:DC:C2:7C:62:23:1C:46:A9:8B:97:0C:BF:FE:F4:FB
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285845A15E1B96185CD3D96AE7BB40
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     30698
IP address blocks:        216.213.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1b:96:18:5c:d3:d9:6a:e7:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=08d2505b-6d29-4e12-9347-eb1dcb6e924f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:40:32:8e:5c:47:6b:13:44:7c:aa:9c:13:
                    3f:3c:81:bc:59:62:b3:5a:99:00:86:a4:bc:48:e9:
                    9e:c0:1b:d5:b1:be:a0:d5:9c:19:33:60:50:57:a3:
                    15:78:69:f3:11:d7:d8:39:8f:72:05:b4:72:fb:8c:
                    81:3b:a3:57:1b:15:74:11:d5:7c:29:55:af:27:fe:
                    82:bc:5d:41:81:3c:bf:b9:67:0c:09:26:81:3c:3b:
                    30:ed:ed:0c:e6:55:a2:95:bf:a7:6f:4f:6a:ee:55:
                    7f:10:45:d6:01:5e:52:80:9e:20:c5:63:52:d3:c1:
                    99:c3:27:59:34:be:8c:c9:ff:d7:1d:9a:ac:98:c7:
                    06:98:65:f5:fa:30:8c:af:f1:77:03:4b:e9:d2:20:
                    c1:69:bd:b0:ce:75:e8:88:99:7f:42:32:36:36:31:
                    10:cc:b5:4d:7c:29:a2:f6:fe:be:d9:0b:d2:e1:16:
                    fa:9d:0d:74:2f:e2:c5:57:a2:f5:69:fd:26:2c:15:
                    0a:2a:00:c2:0f:16:12:ac:77:9b:d9:6c:49:83:6d:
                    8a:fa:59:fd:b9:d8:23:31:3f:bc:9a:04:cf:41:dc:
                    ef:8b:f3:9d:1f:45:ab:83:3f:24:96:b3:7c:8e:bf:
                    5d:bb:78:46:43:6d:22:ea:f8:91:f2:7a:78:20:9e:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:2F:D9:07:DC:C2:7C:62:23:1C:46:A9:8B:97:0C:BF:FE:F4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:7f:2d:d3:39:41:bf:15:c1:6f:6e:46:f9:ff:a3:09:f0:
         78:d0:c5:e9:35:89:dc:1b:b0:ee:18:20:b4:c9:2c:08:c2:1f:
         b9:5c:f1:e8:f0:7a:e2:ec:24:f1:4e:b9:1a:fe:b0:5b:3f:f2:
         42:90:8c:33:3f:d9:11:1e:c7:3a:92:ce:1d:6c:c3:76:2f:63:
         63:58:5f:1e:69:23:8d:f7:05:61:e3:64:0f:80:6f:1b:1e:41:
         ba:1e:43:18:bd:e1:2d:42:a7:9b:81:34:53:a5:fd:7e:9f:6e:
         d8:b0:27:bc:3e:95:8a:81:aa:c2:e9:6a:58:ec:6a:77:d1:64:
         60:de:c5:10:5a:d2:d0:52:bb:4f:a1:af:81:50:d3:c4:38:d6:
         8f:7d:05:8f:e1:f9:76:06:9f:0a:1d:b8:e8:7c:9d:7d:d8:32:
         b8:34:2c:57:c8:b7:af:87:12:fe:e9:02:cd:1e:6c:f0:72:91:
         43:ab:13:6f:25:df:3a:02:8e:25:7d:24:9e:87:ca:c2:c7:5f:
         ad:4b:81:21:b3:1a:02:77:ca:a6:85:76:c8:c8:7a:5f:44:49:
         df:1b:5e:11:00:76:fd:22:75:1e:8a:fe:cf:67:2a:a0:04:b1:
         5d:0f:00:72:d7:8c:a5:3b:69:72:14:70:f7:42:5e:f5:f9:f1:
         f3:0e:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:56 2024 by rpki-client on console-fra.rpki-client.org