Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa
File:                     4a421b4d-0aa7-395c-9353-3b9096b353b8.roa (raw, json)
Hash identifier:          MzvJXA9B99Ac6XxigCs61bRsYNBGxFy/O8013SbtWq8=
Subject key identifier:   82:97:FC:22:FB:9E:7F:6D:60:1C:20:53:88:1F:0B:92:AA:A3:78:BD
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F432858458C6DD6122D4C61F73F094900
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     29909
IP address blocks:        208.80.206.0/23 maxlen: 23
                          208.80.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d6:12:2d:4c:61:f7:3f:09:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=0fcbb991-37d2-4826-bb01-fe3e49dde21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:ab:ff:32:70:ee:d0:36:07:82:5e:b3:14:
                    d0:17:49:81:11:19:44:72:b8:9f:0d:39:09:4c:27:
                    e9:a2:dd:94:90:70:36:27:80:43:6a:54:c4:f2:42:
                    1c:19:a1:34:23:8d:2f:22:f4:67:ed:45:0e:ef:91:
                    17:35:01:12:38:2e:43:b4:7f:8e:c5:46:bc:44:74:
                    bc:6b:b0:23:d5:cb:06:4e:1b:fc:0e:e9:96:79:dd:
                    6a:d4:d2:26:9c:25:17:3f:99:7a:42:f4:d2:43:6b:
                    1f:b4:c2:87:76:19:7e:de:0a:a3:5c:35:65:cf:08:
                    f0:72:f6:02:7f:d7:3b:8f:5e:27:c5:ab:bf:fa:c2:
                    32:90:a1:44:cf:df:0a:d8:12:59:d3:0a:67:da:79:
                    6f:ec:d3:56:f5:f2:60:6a:e9:27:86:6f:0e:d7:73:
                    61:5b:18:35:44:4b:20:4f:86:5a:f8:9f:aa:14:75:
                    d5:9f:39:3a:9f:8c:31:cd:5b:f3:ce:ed:c1:59:e8:
                    4c:b9:bc:d4:81:cd:13:eb:fd:a0:ae:12:e3:dd:7c:
                    78:32:51:c7:f3:65:21:d9:db:db:a1:10:cf:d2:70:
                    7e:e5:af:e8:e8:cf:49:a2:a3:19:0a:31:65:c0:8d:
                    68:d0:4f:8f:62:f0:8f:cf:2d:f4:5b:c4:16:27:46:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:FC:22:FB:9E:7F:6D:60:1C:20:53:88:1F:0B:92:AA:A3:78:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:60:28:14:db:ee:05:f5:40:50:5d:88:7d:ff:35:13:2d:de:
         85:c9:5b:ee:20:18:77:b1:ee:af:90:6b:1f:55:aa:22:21:e3:
         1e:21:7b:6e:b2:b0:81:8d:0f:86:aa:c9:ee:6f:61:6c:50:b7:
         29:22:30:db:bc:20:a9:0c:3e:8c:67:1f:73:7b:bd:cb:bb:44:
         f9:2c:1e:5e:9f:76:17:de:09:06:bd:dd:6d:24:31:fd:64:c3:
         cd:ad:00:0d:ed:41:2a:81:37:df:75:49:ad:67:44:a4:54:1e:
         f8:73:d7:56:ba:00:46:2b:b7:9d:3a:cd:70:48:db:39:cc:c4:
         66:5a:39:fc:ce:fc:73:af:b0:a1:a5:dd:36:bc:c1:75:20:fc:
         c8:4e:80:73:80:5d:2d:5b:bd:d3:db:87:61:8d:7f:15:ef:c1:
         e4:6c:67:36:b1:9c:60:03:b7:2f:07:9b:27:65:ab:63:1a:03:
         e2:78:f0:87:c2:e0:5c:a1:aa:14:aa:09:41:a8:10:37:55:ee:
         94:23:f3:84:09:d0:3a:98:dd:ce:28:ae:0c:1c:90:2a:08:3e:
         b7:65:14:c0:69:40:13:4d:e6:c1:dc:21:47:48:5f:eb:81:89:
         c7:8c:0e:8a:97:a9:9b:8b:b9:d1:70:2a:f6:62:08:3d:4f:e7:
         af:0b:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:09:18 2024 by rpki-client on console-ams.rpki-client.org