Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa
File:                     650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa (raw, json)
Hash identifier:          /hMiDZywA3NlhbIdY/faCsGrbS+XiiAqvpC6ZTIgjDE=
Subject key identifier:   E8:F0:ED:4D:6E:E3:E4:98:D4:15:63:0E:4D:E6:87:E4:4A:F7:02:B0
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F432858458B0889B92647A2DDDE3A6F00
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        209.169.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:89:b9:26:47:a2:dd:de:3a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=a31d5571-1cf8-48e1-9187-e43585659068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:4c:b2:1f:52:9d:e7:a2:ab:e5:01:1f:13:
                    18:ea:29:4f:cb:4b:78:7b:dd:b2:3d:52:9a:92:82:
                    86:b9:9f:97:3a:e9:f3:52:b8:55:a3:7c:49:3c:51:
                    76:5d:34:11:9e:ef:16:f9:e2:6b:4c:6d:7f:ce:9d:
                    80:cd:a9:d4:fd:49:ca:ab:61:e3:ae:56:07:72:b8:
                    2f:81:8f:89:73:39:c5:cb:aa:68:5d:04:d3:8f:79:
                    62:1a:e4:9d:e9:b0:b6:b1:11:89:ec:c2:05:cf:e3:
                    c2:6b:00:5e:a9:e8:e7:78:b6:b0:11:22:45:93:74:
                    ee:ef:60:e2:81:27:79:8a:5f:cc:d8:93:b3:ab:6a:
                    94:d9:10:91:f9:2f:c6:5f:58:6b:5a:ca:06:2c:5d:
                    44:6e:aa:88:4d:ac:2c:20:62:43:be:dd:05:ab:5c:
                    d3:48:4e:b3:f2:fb:7d:09:dd:72:59:2b:5b:02:d1:
                    8c:25:94:f3:72:48:a9:96:84:61:df:77:ad:71:33:
                    69:96:f0:82:8b:29:e1:7c:3a:68:3b:fd:d0:92:be:
                    0b:36:53:e1:f9:bb:ab:17:e7:29:2c:34:37:87:53:
                    7c:4a:4a:4c:81:42:7c:35:ac:7e:e6:c3:4c:a3:42:
                    62:f2:4e:c7:96:bc:d0:40:88:26:de:d3:12:31:63:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:ED:4D:6E:E3:E4:98:D4:15:63:0E:4D:E6:87:E4:4A:F7:02:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/650494f9-7d89-3ad2-b6f4-fc7c7ce449e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:2d:a0:93:a4:4b:e0:71:71:f7:5d:32:7e:64:11:e3:18:
         69:4b:96:21:5a:57:37:72:d1:a5:aa:12:3b:8c:e3:9e:3d:57:
         bf:50:28:f9:fa:83:de:21:7b:61:83:00:e6:b7:5d:d1:a8:31:
         6f:f3:8c:4c:b1:b6:cd:41:1f:55:86:e1:39:88:dd:3c:6a:34:
         d1:92:d3:bf:77:4f:1a:ef:5e:67:ee:a4:c9:ed:77:51:ad:14:
         f5:4a:59:3a:0a:e0:d6:b0:0e:72:c8:81:ef:5a:6a:74:99:57:
         c1:de:e1:76:c0:84:3b:3a:4c:95:31:3a:67:cd:6c:ee:de:a9:
         6c:72:cb:52:a5:9b:cb:75:b1:58:8b:e2:92:60:2c:50:65:cd:
         94:02:86:ab:9a:b7:d3:0a:34:49:63:3f:5b:18:4d:da:e6:96:
         79:76:ec:a4:a9:05:ae:1d:a7:9c:d1:d0:20:00:00:fe:58:6a:
         27:59:02:1f:89:a7:55:aa:59:94:84:1d:01:fe:57:8c:72:9a:
         77:f0:1b:20:54:75:ee:2c:82:1f:8a:70:d8:04:e7:c3:ee:bc:
         cb:ec:5e:89:9d:8a:ab:43:eb:da:40:f1:8d:d3:90:09:3a:86:
         2e:b9:4c:9b:be:16:42:c6:90:69:14:bd:39:14:d7:6b:40:40:
         f5:73:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:45 2024 by rpki-client on console-ams.rpki-client.org