Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
File:                     dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json)
Hash identifier:          O94K//9rc/WNwyiqFmOZYe+dttoBsGsMBeujLY+lxrE=
Subject key identifier:   2E:09:37:91:79:7B:88:BD:E0:50:55:B0:BE:39:20:C2:60:C5:C7:84
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285845777DCDC17B30265F0BA13410
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        134.65.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cd:c1:7b:30:26:5f:0b:a1:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=c0622e0b-cf10-422f-b4b4-b4a3f396f207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:09:c1:2b:42:92:59:e4:f8:92:a5:d1:19:
                    7f:80:ce:43:89:24:73:ae:1b:81:b5:9f:6a:e0:5c:
                    a5:8b:94:f7:bc:b8:78:72:42:38:88:ea:f2:60:6a:
                    28:18:d5:b8:2b:38:5b:1f:a8:1e:b5:af:de:7d:5f:
                    49:1d:1c:c2:66:f9:91:85:5a:1b:58:77:f0:75:90:
                    6b:c4:7c:04:0f:9a:22:7c:a6:25:d2:dd:d8:c7:e8:
                    8f:d9:9b:7b:30:82:33:06:a5:6b:c9:ac:61:3a:c0:
                    da:2f:19:2f:15:0d:c6:af:80:a3:6a:39:0b:93:59:
                    47:14:86:fe:e6:82:25:dd:f3:21:e1:79:37:7f:5e:
                    71:73:46:6e:d4:0a:74:bf:8d:8c:c2:7a:99:c4:01:
                    b3:b8:e7:41:e7:29:c5:29:7f:0c:d6:c9:bc:22:60:
                    c3:da:b4:79:a4:39:c5:63:ec:72:73:0b:a8:e6:40:
                    2d:fd:ae:d3:9c:6b:54:2a:90:1c:11:e2:ce:5f:4e:
                    95:23:ca:8b:a1:40:2f:9d:99:01:24:31:eb:5b:0e:
                    63:df:d3:62:44:af:42:ac:bd:38:a8:3e:cf:2e:c0:
                    91:ba:9a:a3:68:7d:c0:f8:21:34:a8:28:e8:e4:19:
                    35:3f:81:5e:8e:1e:11:ef:dd:0e:fa:75:0e:3c:cf:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:37:91:79:7B:88:BD:E0:50:55:B0:BE:39:20:C2:60:C5:C7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:40:b9:55:c4:e7:76:a6:ea:c5:50:9d:52:e7:95:b9:d5:
         2a:92:bf:b2:46:c9:5b:31:8c:5c:d9:e8:38:3b:e8:69:23:fb:
         a2:5f:82:d1:f4:fd:de:89:97:07:a6:49:fb:c9:39:7f:a0:94:
         a1:a1:05:0a:2a:59:b1:9a:ad:ef:db:09:7f:a7:ec:94:08:95:
         77:f5:62:60:7a:7f:d2:3c:a6:58:44:ba:36:32:64:b1:67:ea:
         57:90:10:7e:04:ef:cb:1a:68:d6:bc:62:e5:71:50:04:3b:2a:
         e5:42:5a:26:56:75:ea:03:db:79:cb:13:8d:51:a3:3c:4d:03:
         c8:78:a3:c3:a3:2b:1e:1f:94:54:a5:8a:81:98:82:67:26:82:
         97:01:42:30:b5:17:13:43:0c:aa:b9:6d:d3:a0:ab:48:61:14:
         69:76:5a:6c:30:bc:88:18:ae:c0:b2:bd:4a:91:eb:ee:60:33:
         14:cc:76:72:34:5e:f5:3c:be:90:ae:a4:5a:27:25:bf:f9:66:
         cd:47:a9:44:69:f0:02:7d:70:97:52:4b:85:70:e2:ec:7c:7e:
         07:a1:93:d1:48:85:20:57:e3:23:e3:0a:c6:08:30:d1:3c:d0:
         8f:bf:10:07:ec:1f:15:4d:c0:7c:4b:5a:7e:51:e0:f7:06:a5:
         7a:65:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:39 2024 by rpki-client on console-ams.rpki-client.org