Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500ab0e7-b17b-3d69-95fe-a45a1b7ee9c1.roa
File:                     500ab0e7-b17b-3d69-95fe-a45a1b7ee9c1.roa (raw, json)
Hash identifier:          Kakfo6/ME30AvrIsWkqoj0uMD7BqGgbOb2i6BaBgLFU=
Subject key identifier:   82:9E:FF:AB:7C:FF:A2:86:2F:7E:CB:82:47:A0:C6:02:42:9F:93:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93C9A68F30709C3697B60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500ab0e7-b17b-3d69-95fe-a45a1b7ee9c1.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     19720
IP address blocks:        216.2.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3c:9a:68:f3:07:09:c3:69:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=9bfe0418-0b40-430d-bdd5-de953a534d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:b5:6f:08:48:8b:71:c2:9e:9e:32:84:c1:
                    e8:f4:97:fa:62:e2:f6:8c:9c:16:ec:33:0b:10:8a:
                    1b:6c:bc:dc:ee:67:12:21:82:07:3e:99:17:04:f1:
                    9a:49:5e:dd:b8:05:8b:59:ce:50:21:dd:93:f4:e7:
                    26:d3:4d:25:b8:f3:7e:e3:9d:3a:4d:98:43:e5:45:
                    e7:bd:3a:c2:b4:46:b1:64:79:70:78:6e:c7:43:3a:
                    24:aa:81:cb:ce:3b:9b:bc:fc:f9:d4:69:3b:1a:5d:
                    09:c5:a3:d0:76:82:82:94:40:27:1f:c0:29:9d:29:
                    12:0a:19:04:76:72:7f:39:b1:30:ab:fd:fa:5a:c7:
                    3e:09:c1:e2:8f:6f:8c:0d:1a:8a:40:93:06:7e:7a:
                    54:de:f3:9b:b7:a0:4c:ae:87:ab:ad:e6:7f:00:24:
                    07:8f:9c:0c:a4:61:1c:fc:fa:bc:c6:df:09:44:bf:
                    4b:79:b3:11:6e:c4:70:58:df:2a:69:77:90:2a:c4:
                    9f:23:e3:44:0d:72:b9:3a:57:e4:48:49:cf:d4:c4:
                    ba:ab:4c:dd:f4:65:20:8b:6f:47:b0:f7:3f:3d:99:
                    a9:15:22:9c:34:2a:3c:fb:f3:f4:32:d8:a0:2e:0a:
                    22:2a:84:e5:70:bf:bf:3b:bb:62:86:c9:4d:66:3b:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:FF:AB:7C:FF:A2:86:2F:7E:CB:82:47:A0:C6:02:42:9F:93:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500ab0e7-b17b-3d69-95fe-a45a1b7ee9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:74:2c:86:41:cb:3d:80:77:21:56:ef:7c:88:e0:f6:42:
         6b:e6:8c:66:61:5c:32:a6:ee:15:8a:e2:02:b8:d4:5f:f7:ae:
         9f:28:4a:37:0a:95:6a:04:82:5a:b1:87:d9:79:6d:bd:04:30:
         c4:98:a1:ea:b0:fb:47:df:25:3c:68:c0:83:52:3d:e1:4b:63:
         74:0e:37:fa:65:57:f1:93:91:66:e9:30:23:1f:fa:d3:07:09:
         d6:bd:d5:03:26:10:2f:ac:0c:95:be:5f:e3:43:62:21:88:90:
         db:de:37:34:49:b2:68:04:62:57:3b:2b:8d:db:f7:56:cf:d1:
         27:a8:c3:6d:4d:7e:16:47:70:67:4c:f0:ba:b0:b1:67:67:e7:
         75:8c:1c:7e:db:88:c2:d7:10:85:53:1c:bd:0f:b8:76:d5:de:
         d9:e3:97:74:3d:1b:ad:94:e2:ed:83:3b:94:7f:1b:5a:ed:45:
         a5:d9:7e:09:3b:15:8c:4d:84:64:40:20:43:fb:cc:e4:68:46:
         91:a6:fd:72:63:45:ff:f1:2c:bc:77:fb:3a:91:bb:46:e6:c3:
         5e:c8:0f:16:c4:9d:8e:2b:1d:bf:b8:4e:7a:83:25:46:89:36:
         eb:70:67:b2:43:fd:53:52:e6:ea:16:72:d0:6d:d4:67:2d:3d:
         4d:ce:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:35 2024 by rpki-client on console-fra.rpki-client.org