Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/820f24a8-af0a-38e7-bbb1-ba268d453edb.roa
File:                     820f24a8-af0a-38e7-bbb1-ba268d453edb.roa (raw, json)
Hash identifier:          V8wdxtvLq9QoNO9lDc9rpKofRnGZtsEhXf7+VwjCvPA=
Subject key identifier:   8A:58:EE:4E:C9:C0:3A:B6:5C:EA:AE:33:FB:DE:6E:9C:C2:9E:EF:AB
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F43285845280AFA901A111361A6B29EC0
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/820f24a8-af0a-38e7-bbb1-ba268d453edb.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        216.205.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:fa:90:1a:11:13:61:a6:b2:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=afe1edca-24a4-49e1-830c-5045e4fa01f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:33:3c:ad:5d:de:b0:83:57:8f:47:25:22:
                    3b:55:aa:90:28:18:b2:ab:8f:56:35:51:ee:02:09:
                    ff:eb:05:a3:52:9f:64:e3:58:97:5e:6f:ce:37:da:
                    0a:17:62:b8:3e:bb:fb:08:c6:b5:a0:c2:d4:ea:0a:
                    07:38:67:a5:ee:c4:7d:78:c3:8f:63:29:a4:d5:ea:
                    a6:b5:a2:85:8d:4d:f1:28:11:69:d7:a0:2c:58:2f:
                    f2:34:d5:ea:4e:38:39:4c:97:01:97:7f:2d:09:05:
                    2a:27:42:ce:19:aa:0a:d7:d0:31:20:96:b9:a3:66:
                    b1:72:9e:35:5f:55:99:15:2a:3c:f9:80:f8:28:1b:
                    91:0c:f9:d6:7e:fe:c5:dd:27:14:67:ce:95:09:e9:
                    79:44:bb:e5:c3:b4:6c:51:fa:60:04:91:18:e5:60:
                    57:ee:30:2c:e3:08:3e:b6:d6:fa:12:ca:4e:98:c6:
                    ac:ef:36:88:ad:7f:f8:d8:0c:c5:b3:31:e5:f6:50:
                    a3:a6:0d:3e:30:6a:0d:0f:fa:3c:c8:0a:e6:65:86:
                    64:8a:c8:15:5b:2b:62:59:6b:28:eb:93:6d:dc:46:
                    de:3e:04:9f:86:92:0a:00:21:d4:c0:ab:ce:8f:72:
                    7a:f3:12:c3:80:46:af:0a:47:61:ac:4f:db:2b:69:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:EE:4E:C9:C0:3A:B6:5C:EA:AE:33:FB:DE:6E:9C:C2:9E:EF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/820f24a8-af0a-38e7-bbb1-ba268d453edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:c3:ee:4e:c5:f6:2e:a5:29:86:43:19:c3:9a:6b:5b:1e:
         3a:04:59:11:35:1d:9a:19:00:e4:a0:97:e6:96:3b:c5:ed:58:
         42:ae:1e:6e:86:2b:7a:60:30:84:34:a2:09:83:cc:07:f0:1e:
         7e:3d:77:21:07:25:87:fe:95:39:4a:35:36:7c:fc:11:d3:b6:
         5b:88:af:37:37:d7:76:9a:08:01:2e:f0:41:36:a6:2d:f3:fe:
         fb:6b:04:14:4c:d9:be:46:f9:5e:34:ac:b0:97:ff:d2:3b:af:
         2e:74:12:4e:aa:94:be:ac:eb:98:9b:f1:0a:46:84:ec:f7:d9:
         0c:e9:9a:18:df:1c:70:ad:a7:6b:df:83:08:0c:8f:e4:2c:8e:
         58:58:c7:bd:db:60:fc:4a:29:81:7f:b0:89:04:d2:be:9f:e3:
         09:36:e3:ae:e3:ce:3f:47:57:2e:52:61:44:17:d9:86:22:d8:
         d4:3e:78:1d:e0:a5:b1:a3:d6:8c:bf:82:88:09:3e:fb:c1:14:
         8a:f3:82:97:84:6d:e9:51:e9:21:5f:67:ef:0d:fd:a8:49:b6:
         79:08:f7:c7:58:e7:7f:f4:c9:63:6e:a6:e3:92:4d:ef:2e:6f:
         f2:3f:72:b0:e4:0a:89:ae:fe:71:70:06:91:27:7a:b3:c4:4f:
         9d:a1:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:48 2024 by rpki-client on console-fra.rpki-client.org