Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
File:                     27d6fce4-3560-3856-9614-274232fb6eef.roa (raw, json)
Hash identifier:          Fx5r7dm0kSVjCYh5bMutbaWzm/onuGzeIJA0cIXcSZc=
Subject key identifier:   34:BF:8A:66:0A:B2:59:A4:B9:9C:82:97:55:01:53:CB:8F:9E:B2:BB
Certificate issuer:       /CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
Certificate serial:       010D0C9F432858456F1DCCA066A79DE59B2E3DE0
Authority key identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     209242
IP address blocks:        216.120.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:cc:a0:66:a7:9d:e5:9b:2e:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=592cc9d4-1fb0-47ba-a65f-e33a1e4eca42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:75:77:b4:04:0d:04:76:fd:ce:1d:b5:58:
                    a7:5f:9e:0b:96:ad:b1:f5:d0:c5:03:e3:ac:9f:44:
                    d7:71:1d:54:81:a5:02:dd:bd:ac:62:32:89:37:d9:
                    cf:c7:76:94:3d:c1:40:ea:6c:fc:32:e5:3d:0d:f6:
                    a5:73:63:c0:56:6f:0e:4b:62:7b:1e:09:75:6c:2d:
                    c6:58:ac:7e:3d:3e:85:0f:dd:fd:95:79:8d:8b:9f:
                    2e:46:bf:6a:04:c8:dc:4b:25:97:7b:32:d7:f9:92:
                    5f:17:21:fc:45:38:0b:48:38:b9:75:43:0d:d1:67:
                    bb:2a:cb:25:35:e5:84:8a:a6:f3:c3:14:09:47:d9:
                    7e:6a:55:7f:9f:2b:5a:2b:c1:00:96:ab:4e:0c:3a:
                    f0:e6:8a:e4:fe:e2:80:53:1c:bb:55:5a:f2:8c:65:
                    b7:c2:ef:16:d0:b3:74:34:74:14:0d:fb:d4:5e:a9:
                    0c:18:d7:ad:75:f5:29:2d:68:c6:29:1d:d1:52:77:
                    3d:b0:0e:33:a3:3e:36:af:fd:a7:4e:4a:ae:f9:68:
                    1e:eb:d1:f6:aa:ec:ae:17:64:f2:a3:15:cf:5e:95:
                    ca:4f:38:70:b1:90:63:4e:d6:29:9f:8b:6f:57:88:
                    7f:fd:7d:9e:4c:af:c6:97:d4:5e:76:3a:e9:e0:d2:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:8A:66:0A:B2:59:A4:B9:9C:82:97:55:01:53:CB:8F:9E:B2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e9:24:ae:26:2c:3c:34:e2:12:18:25:f2:f2:c6:1c:b4:e0:
         05:14:e7:15:08:20:aa:60:1f:b9:74:59:3f:1e:b2:f6:b0:7e:
         bc:e0:f3:44:64:a2:6c:47:d2:b5:03:95:6f:5c:2a:0b:b1:82:
         21:f9:1c:06:90:f6:71:6d:71:c0:eb:93:3a:6c:8a:ee:85:06:
         03:62:05:a0:1f:b4:1d:14:3f:36:dc:70:70:e1:91:e8:ea:53:
         9d:97:f5:56:ce:3b:56:23:15:d7:1e:8d:16:56:a8:0a:56:0d:
         32:43:18:af:ce:5b:ce:a6:ef:72:71:21:64:04:8d:98:6f:53:
         89:d5:d8:f8:76:33:b5:2c:82:06:04:c2:04:69:56:05:92:fb:
         5b:2c:43:97:99:13:7f:0b:e0:59:e8:f4:e3:90:88:7a:a2:39:
         cf:e7:36:9c:7b:1c:4e:2a:2e:e0:59:03:b2:86:87:bf:2e:8a:
         be:0b:67:b9:b3:d1:50:6d:88:56:0c:8b:61:a5:0f:61:43:dc:
         18:1b:23:5b:31:c0:e6:78:91:90:f2:df:8d:37:70:5d:b5:77:
         84:6f:07:78:8d:91:03:42:2f:3f:33:0b:43:73:8c:e6:57:1b:
         21:96:f7:c6:27:24:3c:ca:32:f8:eb:17:41:ff:37:db:58:50:
         32:cc:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:51:05 2024 by rpki-client on console-ams.rpki-client.org