Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
File:                     f6be008e-f3a8-3b2d-a921-07917a719383.roa (raw, json)
Hash identifier:          gUV8ke4tDICWUM0j70+MZMVDt2nJFNx0dR8wR8g9HyE=
Subject key identifier:   59:6C:A5:8F:01:F7:B6:F1:CA:56:61:17:89:2F:2D:94:52:FD:12:C5
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F432858460ED418C9969D637196F97F80
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
Signing time:             Fri 31 May 2024 18:01:41 +0000
ROA not before:           Fri 31 May 2024 18:01:41 +0000
ROA not after:            Thu 29 Aug 2024 18:01:41 +0000
asID:                     32554
IP address blocks:        216.162.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0e:d4:18:c9:96:9d:63:71:96:f9:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 31 18:01:41 2024 GMT
            Not After : Aug 29 18:01:41 2024 GMT
        Subject: CN=7636eae8-50e2-4b28-bee0-ad1e0bd4ea85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:70:37:15:35:e8:ac:6f:d0:44:e6:8d:80:
                    6a:ea:b3:f3:68:28:e0:6e:f9:1a:02:39:0c:69:27:
                    45:88:ff:fc:5b:54:38:a7:0c:d9:bc:00:b1:64:f7:
                    a0:c0:8f:9e:ad:cd:24:7e:59:ce:db:2e:dd:09:ff:
                    85:cb:8d:32:09:63:7e:24:29:f9:4d:29:5f:1d:8a:
                    f8:56:88:9e:28:4d:6f:34:bc:48:56:65:b4:3f:91:
                    c2:24:f4:c9:54:29:fe:e3:5c:9c:3e:8a:99:49:16:
                    3f:70:06:d4:95:c2:83:1f:7b:c1:77:5b:fa:91:44:
                    cd:c2:f6:08:64:2c:5c:ee:01:a6:46:b2:24:c9:32:
                    46:b0:17:d8:2d:27:02:1c:e4:d7:60:84:c9:e6:1d:
                    b0:97:eb:82:bc:ae:5c:f6:5a:62:99:62:ab:b6:30:
                    0e:85:90:20:56:91:e6:73:09:4b:59:61:d2:2f:c4:
                    09:bf:57:f0:b0:3b:ce:e7:be:8c:f0:32:a4:2e:ea:
                    79:eb:50:95:be:29:0b:7b:74:d0:77:91:9c:ca:77:
                    75:c5:95:04:9b:88:10:03:11:b1:67:f3:32:4c:67:
                    0c:af:ba:a1:d5:cb:e9:89:67:50:88:fb:ac:db:1e:
                    3c:b7:66:73:5a:e1:1e:e1:51:84:e8:2f:aa:77:f5:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6C:A5:8F:01:F7:B6:F1:CA:56:61:17:89:2F:2D:94:52:FD:12:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:32:e2:73:66:80:89:ee:91:fa:9a:45:43:fc:f4:a4:88:
         e5:a3:bf:c8:e2:d0:29:d6:fc:5e:89:5c:d2:26:68:a7:b8:85:
         04:43:85:4a:93:86:11:fe:1d:d3:7e:ac:8b:57:16:27:25:9a:
         55:0a:dd:20:1b:81:2a:ce:29:d6:f7:38:cb:3a:0d:aa:fa:fa:
         68:d8:85:37:53:6d:9f:e3:71:71:ea:43:3e:21:4f:12:aa:62:
         0a:be:a4:c6:e0:b0:b9:2f:7f:4b:96:ef:75:af:c0:55:cc:93:
         15:0f:2f:b4:e5:b2:6b:30:dd:28:ad:c6:b7:7f:dc:71:f1:b4:
         fd:03:45:39:e8:a3:89:1c:59:98:40:e4:22:ac:d3:9e:fa:cf:
         4d:a1:44:03:d8:02:4b:ef:42:07:26:94:2a:1d:57:4e:e8:fa:
         0a:91:70:2b:80:ab:48:3b:81:f0:00:99:ae:be:50:67:05:82:
         0e:48:82:aa:5c:b9:c9:ab:74:7f:d4:22:84:46:16:e1:41:fc:
         0f:4a:8a:17:14:44:a8:1b:05:8e:10:cc:03:79:ca:ef:56:24:
         22:82:8b:54:b8:2d:0d:1f:cf:c4:a2:b6:17:27:ea:d6:62:32:
         6d:3d:62:b6:75:61:41:c6:b5:db:fa:e6:f6:7b:ba:e4:2c:1d:
         48:10:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 18:02:55 2024 by rpki-client on console-ams.rpki-client.org