Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
File:                     deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json)
Hash identifier:          yueQ7RY6qP8Cp+p3/F1vJNP+cQfhBjOeVeP3nRM3Qr0=
Subject key identifier:   F7:70:85:42:0E:D3:B8:06:55:57:E3:BD:27:12:DD:DC:34:1B:D9:0F
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F43285845408D1426B50B016560278860
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
Signing time:             Mon 18 Mar 2024 20:42:04 +0000
ROA not before:           Mon 18 Mar 2024 20:42:04 +0000
ROA not after:            Sun 16 Jun 2024 20:42:04 +0000
asID:                     23028
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:8d:14:26:b5:0b:01:65:60:27:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Mar 18 20:42:04 2024 GMT
            Not After : Jun 16 20:42:04 2024 GMT
        Subject: CN=e225140c-d0d8-4d5f-b8b7-984206ae6ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:bd:45:1c:67:ca:1d:c9:39:cf:73:86:47:
                    cb:eb:6e:fa:6e:38:be:42:9b:1e:11:d5:d9:66:b9:
                    1c:03:cf:f9:23:6a:c4:cc:fd:48:70:58:bb:4f:06:
                    80:ac:15:be:47:ff:38:d8:a3:03:9b:ee:cd:e6:7e:
                    d0:90:29:32:9b:a2:f5:93:aa:50:18:2d:3e:15:78:
                    a7:84:90:c2:e5:66:02:ba:c9:3d:58:2a:48:95:50:
                    bc:c0:6d:2b:f9:9a:f4:0e:03:d7:ea:c9:35:55:91:
                    b5:57:65:8f:83:25:7f:c2:e0:e3:f2:66:b2:e6:f2:
                    4a:14:a1:ae:aa:51:16:3d:10:33:e0:38:16:dd:62:
                    da:2a:4e:da:71:42:30:ff:d3:39:cf:73:5b:49:0d:
                    e7:67:e0:00:2c:87:b5:51:7f:42:7a:79:90:1e:95:
                    d5:01:b0:81:76:35:5b:e1:69:a4:c6:ee:32:a6:8b:
                    df:4f:2c:c2:99:ad:59:a8:c5:99:fa:3a:25:e3:79:
                    88:5f:a1:37:c0:de:a2:31:2c:92:1d:86:0e:9c:f1:
                    00:35:98:22:5a:ac:94:a3:6e:d7:5d:c7:1e:cd:1c:
                    73:77:cb:70:a5:a6:46:cc:9c:1f:6b:7a:70:aa:f8:
                    aa:27:31:65:b1:5a:d2:e6:dd:0d:0d:5f:4a:34:79:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:85:42:0E:D3:B8:06:55:57:E3:BD:27:12:DD:DC:34:1B:D9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:52:a6:0b:81:8a:47:07:22:51:65:25:ee:ad:2d:40:b0:
         dd:79:b4:85:d3:39:df:a6:6f:e0:8c:d4:9b:f4:66:53:15:ab:
         1b:08:c6:be:19:45:f2:5c:c6:ec:0a:f9:10:f6:a2:18:36:2a:
         6a:43:71:27:93:25:90:35:0a:5f:e9:a7:e1:77:95:d7:f5:65:
         1c:d2:7f:9b:83:0a:f4:78:ed:94:d6:58:2f:b1:13:b5:f3:9c:
         05:e3:ce:f7:17:9c:23:98:53:ac:74:91:b9:93:55:49:07:57:
         02:9b:82:72:09:cd:bf:64:af:79:52:a8:8c:1b:2a:63:83:41:
         c6:05:f6:15:52:ea:c8:18:3d:88:24:9e:03:58:c1:ed:90:51:
         71:8c:da:53:7c:06:19:f6:df:55:70:91:69:c9:69:07:ec:85:
         0f:b9:29:05:01:9d:61:64:ce:cd:7c:dc:49:c3:93:f0:53:67:
         7d:d4:d5:34:97:b2:c5:31:a7:98:c0:2a:0e:b7:f8:bf:6f:5e:
         e6:27:b2:12:4e:78:d5:7b:50:39:1d:60:08:94:d3:cd:08:4d:
         0d:75:06:b7:d8:0e:2d:3a:6c:50:5d:d2:dc:81:79:d3:25:80:
         c9:9e:e8:be:c8:86:4c:91:f7:b3:c3:89:c0:76:b7:31:5a:d8:
         4c:2e:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:48 2024 by rpki-client on console-ams.rpki-client.org