Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa
File:                     6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa (raw, json)
Hash identifier:          kvnlH7BVXUougdrtX7+3Oqnh67jvYy/L+YNt0pKNSIU=
Subject key identifier:   28:34:17:74:02:55:DB:DE:28:9F:AE:2F:81:91:C6:F0:7C:F6:9D:5F
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858453E42ACC1945F5519D80BD100
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     0
IP address blocks:        192.124.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:ac:c1:94:5f:55:19:d8:0b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=318d1273-dbda-47ba-bcb4-96109ae8a283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:b2:42:9f:0d:e6:01:c3:29:a3:2a:98:6a:
                    94:30:a3:eb:dc:f4:21:7e:c6:a1:0e:2f:b7:f1:b5:
                    eb:73:65:3b:bf:2d:39:78:cf:a6:4c:27:64:78:b0:
                    14:7b:72:ef:96:6e:f6:cf:88:74:e0:23:da:e7:0b:
                    15:e3:ac:2e:eb:ee:54:99:93:b1:72:66:59:2e:f1:
                    1f:a9:32:f9:9a:b2:d3:b7:62:0d:fe:8a:9a:c0:3d:
                    05:ff:aa:26:d9:d0:3a:6f:2f:11:0f:48:d7:62:93:
                    dd:b8:ce:71:87:5d:1f:76:b6:f6:7a:fa:a6:f5:f6:
                    b1:0d:48:99:c0:40:52:cb:0d:47:e2:f3:c7:b5:37:
                    ba:c3:85:10:31:0b:38:00:44:47:ed:c7:36:4b:fa:
                    97:cd:3c:1c:e1:81:a1:2d:59:62:b1:c9:e2:35:ab:
                    9a:08:db:6a:33:4d:d8:ae:c8:cc:a4:1d:f0:5c:f2:
                    2a:e8:f0:cd:b3:dd:9c:96:1b:76:7c:04:2e:7f:7e:
                    bd:28:52:ef:39:19:09:05:c7:98:3a:ec:85:9c:6c:
                    a3:88:1a:1d:24:b0:07:57:af:ee:5b:6e:59:31:78:
                    c4:48:b8:52:f5:b3:72:03:03:9d:1b:51:ec:a5:da:
                    be:34:de:ce:9a:9d:31:3b:7d:d5:5e:09:32:03:9c:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:17:74:02:55:DB:DE:28:9F:AE:2F:81:91:C6:F0:7C:F6:9D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:23:da:c7:e6:d0:c7:54:46:c9:c1:9c:0d:3d:81:8f:29:
         0b:f9:dd:3a:49:f2:c8:46:d6:b8:e7:c4:8a:7e:8c:76:81:34:
         bc:bb:4b:bd:a3:d4:ca:98:7f:6c:11:1b:c6:f6:61:55:6f:ec:
         78:6e:54:ed:25:8a:75:83:56:4d:95:a8:99:9a:7b:da:f4:7c:
         2b:d4:27:92:e2:22:cb:f3:21:12:31:21:a2:d9:e9:0c:3e:95:
         cf:b4:3e:62:f1:64:45:d3:f4:05:be:50:79:38:c7:75:a7:42:
         9e:93:ec:a1:39:98:72:3b:e6:77:c2:31:e2:f1:90:85:4b:77:
         41:e8:ed:3b:a0:f2:4e:f9:ad:de:e5:d9:08:a9:2c:c4:8f:ba:
         58:72:d5:f0:3e:29:78:54:ae:38:81:78:1c:66:fd:52:03:b5:
         4d:4c:0a:14:33:b5:34:99:f7:f5:7b:3e:58:f0:f5:d5:41:09:
         ec:73:9e:04:62:f0:41:75:5c:14:c5:9b:7d:e4:2b:dc:af:2a:
         20:c8:ff:5e:a2:ae:fb:90:4f:c6:c1:9a:b7:28:24:d6:b4:1d:
         64:23:78:cc:e9:03:9f:39:0e:d6:e3:1d:c0:08:94:84:a7:74:
         3b:8c:9b:98:51:59:6a:e4:6a:24:0c:05:6e:86:89:2c:3b:74:
         36:58:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:31 2024 by rpki-client on console-fra.rpki-client.org