Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
File:                     a211ca82-981c-32d0-8241-ba4946736b50.roa (raw, json)
Hash identifier:          jqzvvbgZETu8dpzKjbC8jCYwvaqdnaV0IPT5FKVIbgI=
Subject key identifier:   F1:FB:57:C7:DA:99:F7:D3:D5:5F:56:B8:A5:14:3A:57:9E:29:0E:57
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845777DC800117CB79AEB2F8A00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     53345
IP address blocks:        205.252.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c8:00:11:7c:b7:9a:eb:2f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=2c51eecf-8fba-4c56-a704-75ca763ba7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:1e:d8:71:1c:b3:11:4e:ce:75:c3:ec:50:
                    f1:c9:44:bb:7d:ac:4b:06:f7:d7:57:ae:b7:53:d9:
                    64:a8:50:67:a4:35:b3:62:49:ed:f1:6f:88:d1:f6:
                    c4:f9:54:0b:50:5f:eb:5a:b5:9d:fd:79:26:e1:51:
                    0a:13:a7:02:1d:8d:5c:f6:04:b7:12:22:8a:c6:ef:
                    7b:6b:0c:b9:ac:59:40:17:d2:f5:1f:a1:be:ea:f5:
                    31:ce:9f:41:45:25:4b:1b:05:da:ce:43:47:cd:43:
                    7a:a8:c8:24:3c:0d:39:8c:5e:45:4e:c1:85:5e:7a:
                    e9:10:6c:f8:3e:37:39:d3:e1:e2:57:1a:e2:76:a7:
                    cf:49:ba:3e:3c:e0:73:4b:59:29:57:72:33:2a:c4:
                    ea:9a:cf:91:70:5c:5a:e7:69:35:3c:d4:72:43:91:
                    ab:2c:e7:b6:73:5b:32:3e:b8:a1:61:b9:59:b5:a3:
                    c4:49:79:a9:ae:65:3b:ec:dc:84:0c:09:b1:30:a8:
                    6e:65:69:b1:6f:8c:1c:8a:7c:a9:dd:e7:62:42:9b:
                    b9:82:47:4f:2a:d2:2f:b4:88:28:7a:fd:21:e2:83:
                    a0:b4:56:da:a0:3b:03:6a:60:75:b5:a0:a7:49:d3:
                    c7:a6:af:d2:34:09:2f:16:69:2c:0d:7a:0f:86:aa:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:57:C7:DA:99:F7:D3:D5:5F:56:B8:A5:14:3A:57:9E:29:0E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:21:97:44:21:58:c0:ba:5d:14:b4:1e:17:8e:e9:02:ae:f7:
         c3:99:73:3c:92:99:6f:ce:7a:1f:71:f6:12:4b:5e:6f:9d:bf:
         6f:b8:28:12:f4:dc:67:45:90:9a:77:34:55:68:8e:18:bb:08:
         2b:7a:55:f3:78:30:1c:f7:11:16:87:95:e3:3e:50:ce:f9:5d:
         36:97:32:66:c4:8c:0b:78:9c:43:56:73:c7:96:de:62:01:6c:
         e3:24:00:ff:be:ce:b9:db:a9:e2:a9:1b:74:24:39:b4:3b:56:
         b0:80:ea:ac:ce:f2:f5:2b:e9:2f:a3:dc:b4:03:4a:fe:4f:d5:
         b0:de:76:69:d7:8d:86:4e:a6:86:f5:da:45:63:5f:97:93:21:
         f1:b8:85:be:db:aa:0d:94:17:85:a8:5c:14:12:9a:ee:2e:16:
         0f:cd:f4:a7:90:7c:08:3a:35:0d:a9:2b:90:f7:fe:97:30:10:
         7e:4f:ab:92:24:67:bd:e0:94:0a:8d:17:ff:7d:a8:2b:09:b8:
         e7:67:d0:db:cd:7c:19:cf:ba:10:2a:45:10:c8:e3:74:66:81:
         83:ee:37:7a:1b:53:80:f4:ca:10:78:6c:53:d8:f7:28:9a:af:
         09:ea:88:7d:38:e0:f4:8e:f4:82:4a:2b:d7:05:70:ef:11:07:
         64:40:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:27 2024 by rpki-client on console-ams.rpki-client.org