Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa
File:                     352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa (raw, json)
Hash identifier:          N3t5QDIEggxpFCkeeN6nC7u2i3jN5ZLJj96/GUhC5yA=
Subject key identifier:   CA:16:62:78:ED:86:72:8A:7F:C9:DB:54:6A:EC:E3:B7:FD:00:0B:E9
Certificate issuer:       /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
Certificate serial:       010D0C9F43285844DB45329B48A97EAE3A1EBF00
Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa
Signing time:             Sun 11 Feb 2024 14:00:30 +0000
ROA not before:           Sun 11 Feb 2024 14:00:30 +0000
ROA not after:            Sat 11 May 2024 13:00:30 +0000
asID:                     0
IP address blocks:        206.53.175.0/24 maxlen: 32
                          2001:504:58::/64 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:db:45:32:9b:48:a9:7e:ae:3a:1e:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
        Validity
            Not Before: Feb 11 14:00:30 2024 GMT
            Not After : May 11 13:00:30 2024 GMT
        Subject: CN=ffc4905a-594a-418c-92e0-1924120d91cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:52:61:e4:70:6f:3d:7b:f5:79:36:29:49:
                    ea:61:b0:d7:a1:85:79:3f:63:c5:03:df:7a:7b:db:
                    9b:83:a1:c5:c8:69:54:dc:14:5f:f6:6b:74:e5:08:
                    99:ec:18:09:f2:fc:41:e3:cf:06:0d:ab:9d:64:58:
                    a4:5d:72:36:d0:4a:68:cf:45:e6:08:c8:4f:50:3e:
                    33:44:a0:e3:ea:55:1a:07:92:d5:12:37:be:51:3b:
                    63:aa:a9:dd:5d:cd:d7:50:a7:fb:df:10:bb:ad:2a:
                    db:bf:f4:a5:20:3a:5b:3b:09:51:55:50:e2:61:09:
                    2b:65:b7:84:f6:65:fa:78:2c:f0:5e:22:ff:8d:70:
                    81:ed:ae:8f:83:de:0d:5e:aa:c4:ac:66:74:56:10:
                    aa:9b:90:e5:e5:67:98:3e:a3:6d:11:b5:a9:27:72:
                    50:d0:5b:03:13:a0:5b:e8:77:c0:58:d2:4b:7d:06:
                    3c:4b:22:78:20:c0:0a:08:0e:ca:6c:45:43:80:ff:
                    ea:2e:43:c4:63:5c:fc:89:02:4e:08:10:5f:8a:80:
                    a8:25:81:be:f9:73:22:6c:04:5d:3a:cf:54:60:34:
                    b6:74:52:4a:78:48:2b:da:81:10:1d:5f:58:71:cf:
                    62:f7:b0:64:b9:e2:dd:2f:7a:60:d3:de:93:57:fc:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:16:62:78:ED:86:72:8A:7F:C9:DB:54:6A:EC:E3:B7:FD:00:0B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl

            X509v3 Authority Key Identifier:
                keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.175.0/24
                IPv6:
                  2001:504:58::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:9d:cb:29:32:aa:3d:da:46:ca:71:b1:54:4c:dc:bc:3a:
         c8:d9:70:98:58:ba:23:69:21:84:51:e1:61:92:ad:54:b5:a7:
         79:72:99:b6:6e:c3:8e:46:e0:58:c7:ba:18:fa:77:74:e9:f2:
         5b:30:96:f1:9c:08:81:c1:e7:7c:eb:66:26:4f:34:6e:ce:59:
         ad:ac:5c:37:01:70:8f:53:80:0f:7e:50:1b:b8:50:3b:a2:17:
         98:e9:bc:e4:79:1b:05:c6:a1:6e:f0:76:88:d6:15:94:c1:6a:
         f1:a2:f2:fb:fb:05:53:b0:fd:2b:90:28:07:14:3e:c2:c3:9c:
         f1:bf:de:9e:39:09:4c:17:de:85:2b:50:17:9c:7f:97:58:cc:
         97:9a:4c:ae:b6:73:9b:21:6f:24:48:bd:08:e5:fb:3c:a7:88:
         0c:1b:91:dc:6d:9d:73:a5:32:da:90:1b:ee:e6:7c:cd:ef:fc:
         51:66:61:ce:99:07:c9:e2:59:b3:a1:fe:c7:d3:d5:d0:ed:01:
         14:dd:5d:51:ed:68:30:16:0c:15:60:23:05:bd:01:a7:d2:c3:
         64:4a:43:9f:de:89:80:c2:18:c1:fb:5b:27:65:dd:6f:7e:50:
         2b:87:5b:22:79:50:5b:4a:0d:66:18:b9:18:a5:3d:85:eb:3c:
         0d:f4:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:40 2024 by rpki-client on console-fra.rpki-client.org