Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa
File:                     be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json)
Hash identifier:          6snzHeYsGdhvXwOGH39VvdKuyclJBPEJScrtcGv+YOE=
Subject key identifier:   4B:E2:8B:BF:19:C6:30:3C:4B:69:62:02:59:B6:58:1A:F7:4B:B7:9F
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EBEF8A9733B019901380
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     31813
IP address blocks:        209.221.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:eb:ef:8a:97:33:b0:19:90:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=5bda8e53-859a-48ad-85d5-c16d55246023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:2d:22:eb:06:f8:a7:2b:dd:60:08:96:d8:
                    d0:eb:f2:b5:88:17:05:bd:fe:2a:42:9c:eb:75:cc:
                    0d:4d:88:46:9e:4b:b3:c0:d8:66:8a:a4:9a:0d:09:
                    4b:4f:56:11:0e:ea:36:34:ec:ef:31:1a:0a:54:a7:
                    44:88:6a:7c:5f:57:bf:e6:e6:f8:05:cb:d5:46:48:
                    4c:f1:99:f9:a0:58:17:60:5a:f5:27:8e:b9:58:9a:
                    97:80:7a:0b:98:7d:83:83:c5:a8:8f:22:57:10:e5:
                    a7:c2:71:ae:1b:43:d0:00:c9:df:86:c9:56:7d:b1:
                    2f:67:49:81:24:4a:05:2d:9d:7a:8c:a6:87:6b:7e:
                    7e:4d:04:4a:9f:9f:0a:a2:27:fe:59:48:de:9f:11:
                    3e:57:59:62:71:85:28:1e:40:a2:db:18:6a:34:5b:
                    f7:be:c9:c7:ae:d0:05:9a:97:4b:c8:5c:cc:11:c3:
                    60:0b:2e:7d:09:02:52:bd:2d:de:27:2f:8d:b7:5d:
                    5a:61:19:80:7c:2b:c9:21:c8:d5:07:aa:c0:d0:39:
                    16:43:57:75:de:14:d1:54:9f:6c:ed:a3:ea:b2:31:
                    67:4f:f0:9f:13:d7:62:aa:f0:5a:f4:62:b5:2b:d7:
                    a4:a9:f0:fc:a5:d5:9c:cc:dd:01:b6:98:6f:99:23:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:8B:BF:19:C6:30:3C:4B:69:62:02:59:B6:58:1A:F7:4B:B7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:bf:7e:f9:c9:0b:a2:29:5c:2a:94:54:d2:8f:47:58:29:
         e0:bc:fd:9f:db:5e:17:ba:dd:08:49:97:06:50:96:28:a9:3a:
         f3:0e:be:84:f1:09:d6:af:76:98:25:95:ea:fd:b8:c9:84:87:
         40:e6:ca:72:c0:31:37:94:27:6a:63:a9:ed:5e:45:9c:84:a8:
         15:c4:d0:36:9d:99:56:3c:a6:83:b3:37:e9:08:2d:65:f3:dc:
         8e:f8:3f:3f:ea:cf:45:68:49:cb:c5:99:3a:45:22:1c:98:f9:
         06:7b:46:50:81:1d:09:39:61:82:86:1c:cb:f2:55:fd:9a:75:
         7f:80:35:fd:9a:9b:df:aa:6d:aa:cf:d8:fa:43:15:1e:08:fa:
         b7:7a:1f:16:dc:b0:0d:5c:f0:a8:35:8b:92:33:99:0f:b9:60:
         15:96:73:71:93:9a:c7:6b:91:8c:ae:6c:4a:01:2e:00:a7:bc:
         f1:31:3c:d3:ee:26:9b:8a:d3:1c:f8:62:c9:6e:2f:92:4f:8a:
         3a:3d:99:e2:e4:78:97:2e:5e:b3:ce:c3:09:c3:a2:ab:09:31:
         6d:93:3b:25:6c:48:bd:09:bd:08:5d:81:73:3f:c1:9e:4e:ef:
         40:49:18:c2:ee:0f:95:43:ca:d9:17:b2:42:33:31:75:38:b1:
         5c:7d:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:44:57 2024 by rpki-client on console-fra.rpki-client.org