Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa
File:                     c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa (raw, json)
Hash identifier:          E0UO3tZKtA16SSAUSEfQtRghGYe79w6ibyFGan5luZ0=
Subject key identifier:   DA:60:58:AA:FE:DC:C5:D4:E6:9D:3B:AA:21:CA:E9:AD:F2:9C:15:6F
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858453E42AC7BAA2FA1F0C3B99880
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     0
IP address blocks:        192.74.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:ac:7b:aa:2f:a1:f0:c3:b9:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=29e1385e-1a07-426d-8e8f-1c7ae9d2c8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:48:a8:5e:09:aa:ba:8d:2b:f7:1d:8a:a9:
                    a9:cc:30:f2:28:9b:3d:75:ef:b8:fd:53:9f:d2:22:
                    b3:46:a6:a4:ed:9d:5a:cd:9a:7e:f9:44:52:52:26:
                    fe:9d:f9:8c:0a:a6:d2:2e:4c:e6:31:5e:27:2f:9b:
                    4d:cc:0a:13:4c:04:d7:e9:33:96:c2:60:3d:2e:dd:
                    ba:58:93:1f:92:6d:7d:28:fb:09:b4:3c:61:67:66:
                    d1:ea:5b:d7:f8:e0:0d:bc:a7:e5:3a:06:77:35:7b:
                    f2:fe:89:6d:a9:76:dc:3f:0c:7f:50:27:c6:59:a4:
                    73:63:cb:47:a4:fc:51:56:f6:0b:3a:55:f7:48:d4:
                    9a:d5:fa:0f:c6:5f:dc:0c:8b:24:d2:d5:c5:32:d4:
                    96:0b:ae:56:5a:fd:9f:10:69:84:ed:ef:49:d9:ab:
                    a9:64:ae:6c:ff:91:f1:77:b2:32:70:ed:b9:ec:35:
                    7f:de:6d:df:66:20:70:9e:c4:fd:3e:5d:a8:4c:64:
                    a4:1e:3d:20:83:65:78:8f:ff:2d:ae:da:a5:f5:56:
                    d2:47:2a:b0:e5:cb:97:2d:60:91:6f:b3:d8:c3:9a:
                    d2:1f:c2:f8:f0:24:73:08:2c:02:c3:b7:e5:c5:67:
                    86:9c:93:72:93:4d:a4:71:53:df:52:04:22:45:13:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:60:58:AA:FE:DC:C5:D4:E6:9D:3B:AA:21:CA:E9:AD:F2:9C:15:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:85:3b:48:01:eb:3d:fd:82:8d:c6:66:55:87:e4:c9:5a:7d:
         d2:03:a8:7b:76:5e:ff:7b:6f:1f:38:c1:c4:d3:23:2a:60:a4:
         60:d8:55:aa:ff:97:1b:26:6d:8b:1a:0a:48:ac:a2:3a:ea:f4:
         84:9b:38:e5:f9:4e:bf:ba:ae:98:b5:cc:8c:49:89:7d:fa:23:
         c1:47:93:db:0a:6e:56:06:97:ba:4e:9f:cb:5b:42:9b:85:0a:
         02:64:5b:95:79:7f:f3:cd:8e:26:27:e2:b5:d1:32:37:79:6e:
         24:94:e7:a1:04:8d:24:05:3c:83:30:44:d4:63:e3:f0:75:c9:
         21:fb:8c:21:f5:13:83:74:72:c1:8f:e6:b6:56:4e:f0:47:51:
         4e:a4:ec:ba:19:fc:62:eb:6d:79:24:33:dc:dd:79:f9:55:1d:
         dc:1c:19:f6:f1:ed:32:eb:42:d3:71:08:36:df:ea:53:52:69:
         1a:6d:88:d2:a3:9d:90:0a:b0:3f:bd:fd:fa:2b:49:c1:06:c6:
         50:60:78:26:27:f7:a7:48:48:ab:b6:4c:36:7d:4f:a3:f8:9a:
         79:07:f9:98:fd:a4:57:5f:9a:8f:7a:c5:e6:53:28:2f:3a:b8:
         39:6b:76:b3:96:7f:23:c9:42:8d:31:04:ed:e7:89:88:63:4a:
         13:b9:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:31 2024 by rpki-client on console-fra.rpki-client.org