Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa
File:                     0e9769ae-da14-391c-ba1d-159342defe0f.roa (raw, json)
Hash identifier:          7xAv2NbL9GfCxc84VQtpjFVekuX2JHho8+SdBDcvQow=
Subject key identifier:   2B:73:67:C4:ED:E0:45:AE:17:19:83:64:27:9E:04:19:A6:18:1A:84
Certificate issuer:       /CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1
Certificate serial:       010D0C9F432858457082F9A48DF0DF3609622B00
Authority key identifier: 08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     14618
IP address blocks:        205.167.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:f9:a4:8d:f0:df:36:09:62:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=2e0a3dce-7d79-44d0-8815-e1911d6efbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:1b:19:d8:cf:61:ca:83:7d:d7:ed:1b:79:
                    8b:0e:6a:2d:f4:8c:14:9e:21:a9:5a:74:7b:6f:8f:
                    7e:a4:1e:60:3a:8f:83:db:56:1a:6f:ab:be:06:8d:
                    19:b3:e7:96:ed:be:b1:4e:6a:df:4e:e6:b5:1c:60:
                    d4:61:d1:4c:ff:71:b9:2e:f0:65:dd:9d:23:81:e7:
                    6c:a4:eb:4e:dd:65:2f:5d:71:1d:bc:7f:0f:78:e6:
                    d2:d5:c4:e8:91:d8:ba:0e:73:87:a1:aa:d3:25:f8:
                    5e:3c:bc:a9:11:11:06:f9:2c:f9:10:73:33:47:d3:
                    71:a2:b5:5d:95:f7:56:4d:42:24:21:f6:b1:28:ce:
                    15:98:44:e0:1e:ad:dc:50:2b:8e:32:7c:7c:b5:85:
                    dc:f3:99:38:63:85:96:18:b6:35:07:1e:d5:45:58:
                    a3:ce:f5:f6:55:b8:17:00:21:16:79:7f:69:14:4b:
                    2f:49:38:a7:6a:99:a4:91:e1:ce:b0:ba:c6:75:b1:
                    80:71:ce:e7:0b:9b:80:b4:7f:d1:fa:b9:1d:9a:ea:
                    df:31:94:87:bc:8a:62:ed:60:b4:00:f7:9e:3e:07:
                    ad:e4:61:1b:1c:62:d2:ba:30:f8:2b:12:ce:a0:90:
                    96:94:05:de:56:b9:cf:6f:58:0d:b3:b6:d4:64:63:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:67:C4:ED:E0:45:AE:17:19:83:64:27:9E:04:19:A6:18:1A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl

            X509v3 Authority Key Identifier:
                keyid:08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:a1:d2:b2:a3:9a:d9:49:7d:f2:9f:cd:d8:fa:fd:02:fc:
         73:b3:e0:44:00:78:b3:52:97:92:8d:3b:bb:e3:77:d3:16:bd:
         e1:78:a2:65:17:ed:d5:05:91:a9:a6:9d:72:fb:4a:e3:fb:ea:
         07:79:1a:10:9f:89:5f:0d:d0:86:25:73:71:83:94:6d:fe:de:
         b2:50:70:55:04:01:55:30:8a:e5:a1:d4:12:8e:e5:9e:e3:0a:
         40:69:8a:28:1c:f1:cc:b8:14:ca:bd:91:ba:17:39:41:2a:97:
         65:6f:88:91:35:d1:62:ab:9e:2c:b6:68:0e:81:68:e2:f1:f4:
         6d:ad:b1:32:58:d7:c8:76:76:18:27:fa:71:fe:69:a0:bf:22:
         82:20:d2:05:f9:52:71:4b:a7:18:26:ab:30:4f:54:54:67:20:
         6d:e9:e7:38:a0:92:40:59:b3:03:57:b1:e4:58:d4:fc:f9:8c:
         ee:47:b0:a8:be:ae:a8:89:d7:47:fe:d9:a8:63:8c:e7:79:28:
         a2:e4:cd:08:59:49:99:75:c1:9e:ef:8f:43:2d:9f:ba:70:b3:
         22:43:3f:e6:d1:79:09:cc:e4:f8:93:38:3f:00:e0:10:f2:61:
         9f:7e:19:be:95:ec:d3:45:87:82:36:49:ca:15:fb:b3:b5:d8:
         a6:e9:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:28:32 2024 by rpki-client on console-fra.rpki-client.org