Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa
File:                     8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa (raw, json)
Hash identifier:          l3r6lDtvo23ltTz4JOIhI2Q03HFUmF4i/HX/QMM1+3c=
Subject key identifier:   32:6A:35:F5:F5:17:53:49:B7:8E:00:6F:24:7D:2A:99:94:B0:41:CC
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584531B298DCDA781DDBC2F3D280
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        216.185.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:98:dc:da:78:1d:db:c2:f3:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=dbe05ee1-0636-4bdd-893f-21711a1d04cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:99:2c:fa:28:ce:35:d1:8b:f3:b7:f5:c1:
                    36:b5:30:0d:58:58:2d:02:a1:67:62:29:17:76:1d:
                    92:0c:37:68:f0:be:ba:07:04:1b:17:2e:28:62:6f:
                    b3:50:cc:1c:b0:a4:9c:57:23:9a:e0:49:c4:a0:12:
                    f6:a3:27:fb:94:c1:c4:ae:c8:27:12:38:c1:01:02:
                    6c:8b:34:56:a0:02:ff:82:4a:bb:13:ab:b6:37:03:
                    46:63:8b:cc:9b:f9:c9:ad:4f:86:7c:26:61:b6:a5:
                    57:92:fe:ed:5d:25:79:87:7f:51:9e:20:5d:70:b9:
                    3a:a2:1c:24:55:bf:93:0f:f7:a2:23:80:4a:db:16:
                    68:f9:4e:90:d9:96:90:f9:17:2b:f0:dc:68:a0:13:
                    44:95:f1:de:ce:a4:b3:e0:25:12:62:75:52:c2:a4:
                    18:33:7d:6e:9b:4d:6f:a0:cd:15:a8:c0:13:a2:4d:
                    d6:11:14:16:61:7b:50:93:1c:df:eb:a1:26:6e:13:
                    7e:98:4e:1d:8a:de:28:01:ec:e1:b4:25:3c:2c:fb:
                    da:ec:32:52:07:1d:c6:03:54:ec:8f:63:3a:f3:e0:
                    b8:38:6a:ec:a4:77:d0:04:41:e8:f3:53:5e:40:4e:
                    17:b0:41:52:d1:a0:6c:42:66:d3:25:f6:37:79:e4:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:35:F5:F5:17:53:49:B7:8E:00:6F:24:7D:2A:99:94:B0:41:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:42:fa:c8:be:2f:2d:0f:a1:f2:f4:0b:e2:96:31:a9:b5:a8:
         16:5f:b3:58:89:d2:8d:dd:b1:be:4b:91:52:c1:14:5d:d9:a0:
         80:db:87:a4:48:b2:5a:92:95:5a:35:33:b7:89:3c:b5:a2:d6:
         97:57:b5:b6:31:19:d1:93:b2:36:2b:b6:7a:df:50:94:17:27:
         bd:9c:d5:aa:bf:18:3c:1d:8f:f8:06:cf:f6:e6:47:41:a7:f9:
         21:8d:fd:8e:b1:b9:bd:80:56:66:40:b0:15:db:eb:35:3a:9c:
         ea:85:80:35:a7:a3:7c:67:93:9b:32:17:8a:d7:0e:1e:14:9f:
         43:e9:a3:c2:0e:3e:38:5a:7b:27:92:94:de:b9:6a:0e:6d:05:
         d4:82:92:6a:65:24:cd:77:23:c5:1c:03:79:c7:dc:67:bb:32:
         50:1f:41:84:03:61:ff:88:66:f7:eb:1a:40:47:4a:1d:37:f1:
         8d:4c:02:32:77:ff:59:84:1b:eb:60:1f:fb:e1:2f:e0:63:ae:
         14:01:b1:8b:d7:ea:a7:ec:12:8c:8b:95:b1:24:fe:30:51:bb:
         d6:78:25:15:99:94:10:da:be:a0:be:38:91:48:15:fe:63:a2:
         78:ca:a9:02:b3:74:c0:24:2d:f5:ec:da:cc:fa:94:f6:8f:46:
         ff:b8:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:51 2024 by rpki-client on console-ams.rpki-client.org