Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
File:                     3cb7fab8-7537-3a90-a460-36313c91e1b5.roa (raw, json)
Hash identifier:          wtp5nFziLc+xHwZbts9ePfBiwlnGYG+Aly4EaGe89aU=
Subject key identifier:   67:8C:C8:52:E1:78:D8:B7:18:4A:7E:BC:62:B4:46:2F:E7:98:67:4D
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F43285844FE2AE7D36155CA7C90D59E80
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        216.247.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e7:d3:61:55:ca:7c:90:d5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=eccc8293-6ac6-4c96-aebb-319cab52e605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:a3:73:bd:06:16:2d:7f:04:2f:2d:22:ff:
                    a9:2e:3f:fd:b3:5d:f4:eb:32:d1:28:df:d1:c6:f2:
                    e5:06:d5:2e:d0:ff:d4:05:d0:04:fb:34:e4:91:c9:
                    71:74:89:a5:8f:29:a4:13:1f:0f:f9:88:1b:17:35:
                    6d:ba:83:92:b2:66:1d:b7:91:ea:51:7f:4c:d5:78:
                    d4:c7:47:9f:ef:86:b9:d9:3a:48:62:4e:64:13:61:
                    d9:78:16:50:25:06:36:ce:26:1a:a3:3d:2d:08:4c:
                    81:20:47:55:30:a7:8f:f8:58:f9:8e:66:b8:09:0c:
                    f0:b2:e8:38:11:d8:37:e6:bf:64:66:e9:cb:fa:cd:
                    a4:71:98:06:7f:27:81:aa:1c:cd:fd:a4:a2:9d:12:
                    83:e0:c4:dc:db:89:83:e0:62:58:21:7f:95:c0:d6:
                    84:24:80:49:fc:c4:88:d1:74:37:fd:eb:71:f6:3e:
                    ff:2d:cb:af:bc:98:c3:7d:7b:6d:b1:6b:8a:1e:ae:
                    f8:d9:b9:e2:5b:4b:af:ea:59:df:a3:4e:23:18:f5:
                    fe:70:35:98:5c:24:99:e5:e9:39:df:d3:e4:4e:3d:
                    99:0f:ae:bf:4c:f2:3e:b4:cc:80:d0:5b:85:44:55:
                    3c:20:a3:a4:1e:04:53:df:0c:ef:51:90:c3:a8:59:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:C8:52:E1:78:D8:B7:18:4A:7E:BC:62:B4:46:2F:E7:98:67:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:a8:d1:f5:c8:76:6d:5e:7d:ce:2f:46:e8:9b:7f:35:64:
         41:64:4c:40:fc:11:fe:31:ef:9a:b9:f3:a0:92:2d:d5:04:91:
         82:3f:fc:7a:e6:c8:31:12:c8:b6:ed:84:2d:00:08:63:f3:77:
         09:21:87:00:ca:c3:87:9c:d8:45:29:f7:b9:9c:9b:1c:50:0f:
         12:a4:6d:c2:85:d8:aa:0a:aa:87:b7:a0:20:d1:e1:8d:28:59:
         67:2b:a3:4b:c9:67:53:8f:d8:4a:bb:15:c2:80:4f:28:49:e2:
         e7:ca:0b:dd:d5:b6:c1:78:8f:7b:2f:47:0b:7c:90:ec:10:55:
         a2:3f:79:95:7a:85:b0:1d:cb:83:3a:a8:e6:b0:71:03:c1:5e:
         bf:3a:c6:19:0a:af:44:a5:13:31:6d:42:4a:37:64:c6:a2:b7:
         1b:41:75:37:23:75:7b:c8:38:0f:9a:f0:a3:39:c0:73:ef:b2:
         50:08:8b:51:3a:8c:5a:91:46:c1:fe:80:81:37:61:7d:4b:b1:
         e5:8b:30:5e:6d:f3:f8:cc:72:0e:7c:7e:13:99:6a:a9:a9:17:
         37:aa:e5:fa:90:a8:7d:4b:93:f9:ee:85:a3:b6:6b:99:4c:23:
         41:e4:33:94:67:2d:89:a2:3c:b2:24:e4:1c:22:8e:4c:ae:72:
         4b:bc:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:47 2024 by rpki-client on console-ams.rpki-client.org