Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
File:                     9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa (raw, json)
Hash identifier:          LQs7fknSKSW7Ny9Nw4dB18302c4egGjj0oPzaoun8qU=
Subject key identifier:   CD:52:7C:C9:63:6C:3D:2C:B8:42:67:71:C5:14:D4:3C:88:8C:00:2F
Certificate issuer:       /CN=3905609c-39ed-4063-a3a8-68871c079747
Certificate serial:       010D0C9F43285844ED6A910068F6B577C6FE7180
Authority key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        216.245.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:91:00:68:f6:b5:77:c6:fe:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905609c-39ed-4063-a3a8-68871c079747
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=22f15ffd-74f7-47aa-b7de-196240787675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9b:78:1d:1b:06:42:ed:02:cd:64:4c:a5:83:
                    92:78:eb:74:2d:af:17:cf:74:a1:86:ce:13:58:ea:
                    dd:c8:e5:65:b4:a7:5f:08:82:6c:ec:e9:a9:f6:95:
                    b5:ef:4a:7b:cc:26:57:7f:d5:c6:b5:d8:d3:4f:92:
                    02:22:63:f5:75:1b:0c:b2:06:13:45:69:7b:3b:5c:
                    1c:0a:cf:0e:02:8e:04:10:04:75:95:cd:b2:c7:58:
                    ad:3b:66:e6:17:72:3a:ff:e8:99:ef:89:6d:3a:40:
                    c5:cf:09:33:4a:cc:2e:c9:a1:13:6d:a2:c8:6f:79:
                    ab:11:67:e3:58:44:1f:97:8a:90:b1:91:ba:9a:33:
                    cd:4a:c4:62:52:aa:0b:57:9c:b9:93:71:1d:54:0f:
                    44:d4:d3:cd:ce:04:28:02:c7:a3:88:33:19:f4:09:
                    b9:8f:28:18:80:81:13:44:9d:a5:86:9a:85:8f:68:
                    81:4d:a0:12:38:16:0a:b7:34:fb:b5:b0:91:04:36:
                    9e:a9:58:ad:86:6b:7b:dd:c8:7d:19:be:8d:a3:87:
                    07:e5:81:0d:69:99:cb:0d:28:50:5b:26:98:3a:2c:
                    55:93:94:a6:eb:8d:3c:21:a9:09:1d:6f:cb:79:4a:
                    a0:f0:7d:38:ab:ff:f7:f0:23:57:85:e9:35:65:23:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:7C:C9:63:6C:3D:2C:B8:42:67:71:C5:14:D4:3C:88:8C:00:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/9e138f3a-6269-3985-ba91-1ef3e6a7e4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl

            X509v3 Authority Key Identifier:
                keyid:BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:28:56:1a:bf:f8:fe:4e:a5:64:36:7f:96:20:0d:0f:16:0d:
         1e:00:5f:b9:f4:42:d6:e2:4d:8d:94:9a:5c:73:e0:8b:2a:25:
         6a:e1:de:c1:3a:80:54:04:dc:f4:75:05:b6:b1:d8:12:10:47:
         0f:36:6a:88:a4:89:9f:8f:16:73:9c:b0:54:0c:cd:6e:9c:4d:
         9c:da:e6:8a:69:1c:e9:a2:42:8c:97:04:b2:46:9f:e5:30:c0:
         73:a0:ee:58:47:fb:11:e0:8e:92:a9:2e:4d:58:46:26:65:3e:
         d7:9e:41:40:a8:a0:3a:1b:46:e7:a4:cc:7b:f8:d4:62:f2:d3:
         69:ab:47:ce:fd:c2:26:93:4b:13:3a:6b:9a:24:49:e6:b8:7f:
         70:67:29:4f:e8:99:48:40:25:88:6d:89:df:52:52:76:5d:d5:
         a4:84:f1:ef:46:0a:73:84:b1:02:3d:a5:50:5c:cb:9c:c2:ff:
         20:f0:35:e7:02:de:f6:88:0b:93:5c:c7:42:ef:0f:71:c5:6c:
         43:02:56:dc:50:a2:3d:06:fb:73:78:59:9c:18:86:34:24:3b:
         42:a5:56:bd:b7:a2:6e:66:37:fa:c9:82:fe:25:03:c1:1e:2b:
         3e:d9:9a:b1:ab:60:8e:07:66:d3:a9:64:9b:d4:02:2b:a7:1c:
         6a:37:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:05 2024 by rpki-client on console-ams.rpki-client.org