Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa
File:                     6a7168dc-bbc2-35d6-be1b-4425c171e598.roa (raw, json)
Hash identifier:          EFUl/wRDlXpiAgfUtXiRvLAo65fUU37BD8vm/2e3jKw=
Subject key identifier:   6F:0D:1F:B0:0F:D4:BB:55:5E:E4:51:98:29:E1:5B:B5:3C:21:02:C3
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F432858452540467C19D5559FCB2872C0
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     13347
IP address blocks:        209.166.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:46:7c:19:d5:55:9f:cb:28:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=cddd7787-aad2-40e7-9826-5b4127e1743e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:39:50:91:d0:71:ed:63:c8:f0:6d:01:79:
                    f7:26:ec:0c:b8:70:bd:4f:cb:45:bb:cb:a2:f7:3e:
                    1b:c2:2d:29:d0:49:32:3f:a3:3c:a2:b0:27:bb:7d:
                    93:1e:9b:95:30:b3:a5:6a:07:7a:b7:2a:c6:90:94:
                    93:88:11:15:da:1d:49:17:38:1f:23:cc:2e:da:0b:
                    e1:cb:b9:3e:cc:3e:50:cf:ac:fa:2b:a8:e0:35:a8:
                    17:0e:c5:26:ad:e1:2a:53:7f:a3:91:34:58:df:93:
                    80:0f:d9:33:da:c5:f6:fd:11:0e:86:c0:eb:05:c5:
                    38:a3:2a:33:c9:40:3d:25:3a:c2:8c:26:ac:be:ba:
                    e2:22:3d:cf:b9:14:cd:df:09:95:a9:d5:a3:c8:c3:
                    df:16:b0:d4:c4:88:a2:e3:f0:25:4e:12:9c:b4:b2:
                    18:1e:b6:b3:2e:0c:61:b1:4f:43:cb:be:16:dc:3c:
                    77:2b:e9:3e:d4:f6:99:27:ab:44:38:d3:99:88:cd:
                    78:c2:99:2f:c5:c1:66:cf:97:f4:74:1c:91:4e:b8:
                    f4:0f:ef:25:e1:39:8c:42:7b:5f:44:ff:5c:92:be:
                    a6:2d:7f:59:73:3c:27:b2:e4:6a:d6:95:14:18:c2:
                    f6:48:27:bd:bf:35:cc:a0:d3:2d:33:48:f3:b3:12:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0D:1F:B0:0F:D4:BB:55:5E:E4:51:98:29:E1:5B:B5:3C:21:02:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:5f:b7:a4:57:3a:6e:5f:32:a5:ba:94:bd:92:81:02:d2:
         13:b5:4c:6d:14:8b:a0:42:e0:53:a9:39:fa:6d:6f:ec:9d:de:
         e0:16:a0:72:82:01:00:fb:77:f5:97:34:d5:b0:32:22:65:b2:
         12:b5:ae:fe:a8:b7:5f:5e:9a:ff:dd:71:43:81:e9:4c:f1:53:
         eb:16:92:c9:48:94:75:d6:f6:50:ef:88:db:70:f3:b8:fe:b2:
         88:6a:34:e7:c1:27:c4:5f:02:40:08:6b:0d:49:78:db:1b:37:
         c3:20:1a:a5:c3:ac:f1:ce:42:7f:b8:35:52:b0:78:32:34:cd:
         84:2e:9c:87:b0:5d:1f:b0:e9:8e:4d:1a:d9:f0:b5:ee:7c:57:
         3c:f9:57:5b:a2:56:e6:de:cc:b1:36:33:e7:63:01:5c:6a:eb:
         52:b3:78:57:1a:92:c7:ef:95:f9:90:c0:94:b4:b6:07:2c:22:
         57:e8:96:86:27:aa:37:ae:a1:1f:1d:01:f5:1e:3f:2d:2b:e3:
         d4:1d:11:de:39:70:10:0c:0f:93:27:69:60:47:ec:5b:d0:3d:
         bb:06:35:8c:97:75:fb:6e:0f:6f:ee:4b:18:30:38:7f:9e:0d:
         ef:8a:2b:c1:f7:8a:87:8d:62:d7:23:fc:1b:80:7e:1f:23:7a:
         02:e7:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:36 2024 by rpki-client on console-fra.rpki-client.org