Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa
File:                     733814ea-3460-36b3-964e-555b6261ca95.roa (raw, json)
Hash identifier:          N7hCFXdik471WvBnWnFELODaI6qw5zuk+AcmqvnHm/k=
Subject key identifier:   43:B7:58:DE:E9:41:A0:22:DC:2B:FB:73:37:6B:54:E9:4D:E8:D6:03
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462A20F0568B9DFF05764700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa
Signing time:             Wed 20 Mar 2024 20:57:33 +0000
ROA not before:           Wed 20 Mar 2024 20:57:33 +0000
ROA not after:            Tue 18 Jun 2024 20:57:33 +0000
asID:                     15169
IP address blocks:        216.58.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:20:f0:56:8b:9d:ff:05:76:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:57:33 2024 GMT
            Not After : Jun 18 20:57:33 2024 GMT
        Subject: CN=033b8d37-129e-4406-800c-48fcb4eedfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:ce:93:dc:41:a8:37:23:ba:ff:83:5d:5a:
                    e2:b6:58:68:84:35:f8:c1:96:c4:2c:c0:6a:85:98:
                    5b:fe:fa:de:cb:40:11:4d:f1:65:3f:ce:03:00:f2:
                    c1:34:ec:17:87:c0:97:7f:63:f6:b1:c8:01:e3:86:
                    7a:98:ac:84:e7:4e:f0:02:3c:48:b1:7f:9b:f6:d6:
                    8e:3f:96:4a:63:6e:a7:8f:fd:ee:99:d4:a4:cb:1c:
                    42:32:26:ed:24:b7:e5:a4:cf:bb:e5:33:aa:94:51:
                    77:2a:be:d6:85:86:9f:ad:8b:c4:b8:e3:42:db:e4:
                    6b:a9:f1:5d:a2:a4:06:99:0a:1b:36:e0:cf:40:a7:
                    0f:37:99:b4:99:21:b8:bc:00:66:c8:77:cf:3e:64:
                    00:ce:29:11:c1:37:b2:d8:6d:2e:81:e0:af:dd:c9:
                    e0:15:a6:44:ba:94:59:75:36:01:a2:94:c2:a2:bb:
                    48:47:b9:61:24:f3:86:6b:27:8d:0e:85:0d:3d:98:
                    15:fa:94:8d:01:41:4d:54:74:a4:5e:71:7c:f6:58:
                    a4:c7:2a:05:b5:c5:70:66:ad:cd:21:28:e4:10:26:
                    99:5a:90:5f:bc:c3:01:ac:49:5c:65:35:5d:c1:1b:
                    c0:58:0c:35:6a:23:61:5d:de:d7:81:db:c0:17:fb:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:58:DE:E9:41:A0:22:DC:2B:FB:73:37:6B:54:E9:4D:E8:D6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:58:33:fb:c7:96:12:7d:e9:17:91:f2:ad:4a:a8:94:1f:b7:
         1f:29:98:91:82:64:22:e2:d3:2f:26:ab:c2:55:87:58:31:8e:
         da:6b:6a:f6:cd:94:d8:6b:c8:64:10:6c:c2:85:e0:76:87:83:
         4c:ff:78:4f:e8:5d:d5:2b:33:ee:45:fb:eb:1e:df:87:a6:80:
         1a:2f:e9:ca:ed:3f:14:a8:ad:59:7c:ad:49:7f:bb:36:34:27:
         93:d3:75:72:eb:1c:52:41:aa:02:16:38:00:9f:6f:af:0a:15:
         69:95:2e:83:3b:af:09:ea:92:3d:12:5c:97:17:d7:1d:dd:8a:
         86:67:a8:0e:6e:32:3c:7a:93:d7:d1:20:3b:7f:63:15:3f:8d:
         d7:9d:1f:80:c3:42:e6:99:8f:58:b6:65:e6:bc:79:d5:d9:69:
         74:e1:6b:8b:10:b7:c8:56:2b:8d:ce:f7:26:c3:ef:25:57:0c:
         59:4b:2d:ed:59:2c:f0:d3:39:65:b9:3a:24:78:a9:84:a8:ff:
         19:e9:4b:17:82:6b:bb:9f:e2:a5:1a:5a:0a:59:ee:14:5f:92:
         d6:77:96:1f:53:1c:c3:8d:89:94:38:5e:5b:10:03:6d:75:ce:
         3a:8b:b8:6c:33:05:15:b7:f0:24:d5:95:3f:45:72:79:56:96:
         27:45:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:19 2024 by rpki-client on console-fra.rpki-client.org