Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
File:                     7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json)
Hash identifier:          BnWoNPO2fx4nMXEjjGrNyOzxk1XlANFrEoeSKIHwTRY=
Subject key identifier:   76:4F:8B:A5:74:F3:6A:B4:06:F1:57:9E:8D:4D:E7:F9:AE:A7:B8:E0
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F43285845280AFAA285E4A8C045117880
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        216.205.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:fa:a2:85:e4:a8:c0:45:11:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=bd022903-8b04-417a-ad01-eeffb172bb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:24:22:95:2a:59:51:e7:29:f4:59:92:bf:
                    f7:d8:9f:71:0c:82:25:ff:94:c9:33:8f:49:40:b8:
                    a4:39:a4:b1:4e:9a:e9:64:3d:23:6d:53:4b:69:eb:
                    14:1b:e2:aa:a6:d2:98:dc:0d:7b:a9:b0:35:b1:af:
                    3d:b3:5e:66:82:1f:50:8e:71:7f:83:dc:83:ee:d7:
                    5a:bf:b1:7d:f7:b7:40:16:73:e2:28:6c:97:e0:55:
                    71:bb:8b:6d:ce:94:23:0d:9d:8b:47:ef:01:ab:50:
                    5a:d7:88:81:9b:a6:89:bd:fd:41:a6:0f:90:e8:61:
                    4a:44:a8:3a:d5:c5:76:e4:18:2e:d0:1e:e0:30:80:
                    e1:67:47:46:b7:48:6e:b9:5a:9c:ce:01:ad:d4:31:
                    70:ce:1b:ab:d8:39:c8:28:94:be:f4:07:60:d1:91:
                    57:44:f7:cf:b9:15:4e:58:ac:3c:5b:00:d1:d0:ad:
                    80:24:f5:d5:ea:a2:b9:2c:31:56:eb:9b:52:ce:ea:
                    1f:8f:64:6b:b9:48:83:26:12:9b:c5:1b:a5:14:99:
                    93:23:33:4c:5a:26:58:d5:ff:b2:9b:32:55:9c:94:
                    38:88:46:b4:0d:dd:ef:de:b0:99:f0:8f:0b:35:d4:
                    36:95:ed:c6:4d:7e:7a:f0:cc:fb:ec:12:41:59:b0:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:8B:A5:74:F3:6A:B4:06:F1:57:9E:8D:4D:E7:F9:AE:A7:B8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:20:c3:4f:f3:fa:ff:f7:bd:0e:6f:c4:30:c3:fb:c9:3f:84:
         6e:63:5b:06:70:75:35:df:1f:3e:da:de:3d:b3:11:0f:f1:b8:
         a8:80:65:4a:fc:43:59:94:06:9e:96:36:2c:2a:3a:d5:f2:74:
         c9:21:b3:10:f0:92:fe:35:89:45:97:73:34:79:d4:7c:8d:bc:
         83:c7:fd:d2:bb:37:a9:4b:9d:68:b3:2c:91:97:19:6c:2f:2c:
         af:05:46:c5:00:d5:cd:8c:b0:3d:8f:d5:ec:b0:a7:23:76:9f:
         1e:55:1d:b8:35:21:b5:b1:6e:b4:a8:89:9d:77:f2:4e:ca:8d:
         91:5f:fa:d5:6f:21:33:98:d7:f1:df:d4:25:8a:cb:7f:65:ef:
         9c:9e:de:94:87:46:6e:7d:c6:e4:77:33:7c:b1:f0:18:7c:c7:
         87:db:ff:4a:89:50:a8:b3:56:91:c2:67:cc:23:1f:03:19:27:
         9e:ce:3a:96:6b:3f:f4:ac:23:83:b0:3d:bb:d5:72:b4:c4:9d:
         74:1d:a8:42:ae:e5:b3:f5:ff:a6:e1:b8:75:b5:aa:41:11:52:
         4b:64:b3:46:db:49:03:31:bd:f3:af:6b:2e:cd:68:7a:92:80:
         63:4a:10:d7:ed:0e:63:9a:61:c3:81:bc:ac:a3:3f:92:6c:2b:
         3d:72:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:04:09 2024 by rpki-client on console-fra.rpki-client.org