Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/625238d0-46f1-3116-8bea-e723f8197120.roa
File:                     625238d0-46f1-3116-8bea-e723f8197120.roa (raw, json)
Hash identifier:          dsUyGMBuFMaDWVbSPkVnT8N0AGq+3SjIWUJcek/3BRs=
Subject key identifier:   2F:56:90:83:AF:50:84:2A:25:02:44:EF:F7:AD:7F:B2:A6:DD:5E:5A
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285845AC8A187BB6C19690643AA500
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/625238d0-46f1-3116-8bea-e723f8197120.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     203020
IP address blocks:        216.73.180.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:18:7b:b6:c1:96:90:64:3a:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=77c8fc19-9b06-45b6-94cc-1410ef25e8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:8d:ed:72:c3:e4:9d:44:ae:7f:20:db:19:
                    03:16:70:94:e1:ba:7f:85:3b:64:fe:ea:47:5c:1f:
                    d2:22:b5:18:d4:fa:d4:8e:50:2f:62:8a:ed:f7:af:
                    a9:f0:fa:99:d1:59:90:0b:44:74:4d:81:e6:de:26:
                    ac:00:10:40:64:b4:c6:79:61:0b:d1:eb:cf:46:3a:
                    d2:4f:0b:6c:ad:88:8f:64:00:2e:c3:57:70:c5:13:
                    60:ed:d4:98:26:f1:7c:04:eb:6f:c1:4c:f0:50:54:
                    44:30:06:45:c7:fa:6c:75:59:f3:c7:e3:a8:cd:c1:
                    1e:02:70:a1:80:bf:ed:d7:e1:c7:ec:30:e3:66:55:
                    53:d3:6d:83:10:37:6c:94:49:42:3a:16:62:a4:af:
                    56:d3:1d:2d:49:87:f2:df:c3:ac:9d:85:c9:10:14:
                    98:8c:45:cb:ec:59:99:64:e8:66:43:b3:ee:b2:ff:
                    9d:94:07:c3:37:59:07:03:5b:24:31:b1:38:c4:61:
                    6d:e1:1c:49:5b:a7:46:24:36:c3:04:57:5a:20:49:
                    54:68:c8:9b:ec:ad:79:22:1c:a9:8d:2b:b0:43:29:
                    64:5b:51:b5:67:36:9e:0d:6b:35:c2:f0:89:8e:7f:
                    75:cc:d2:bf:8d:85:c2:ee:02:f0:2b:32:64:b3:ac:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:90:83:AF:50:84:2A:25:02:44:EF:F7:AD:7F:B2:A6:DD:5E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/625238d0-46f1-3116-8bea-e723f8197120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:84:23:fc:48:db:e9:dc:e4:57:2c:12:49:a4:d6:6f:c1:03:
         0e:c0:3f:b4:0a:74:6a:65:2e:5c:24:13:29:f1:e7:b2:20:16:
         03:a7:f3:08:6c:d0:6d:ef:8d:92:4f:1a:40:90:14:b2:a8:4a:
         4f:f5:7f:88:3a:b2:3d:82:40:11:61:11:92:0b:07:6e:42:3a:
         0a:5c:99:77:70:07:7a:19:11:a5:da:20:6e:c2:30:70:27:6d:
         d2:ab:05:3a:23:06:9a:33:ff:44:93:60:7a:28:2c:98:b6:7c:
         6c:bc:7c:8a:44:7a:da:24:59:82:58:1d:c7:b6:cc:f5:74:d5:
         77:ff:4b:f1:97:5a:b8:a1:5f:76:8c:5f:e3:37:20:d8:57:c7:
         11:31:bc:9e:77:5f:14:58:ec:59:b7:e9:d2:1b:5c:d9:44:50:
         c8:af:7b:86:70:a8:cb:33:6c:79:08:59:c4:03:2e:25:c7:a7:
         69:ae:49:c0:0b:3c:a7:62:e1:92:31:4d:9f:c3:1a:4f:a5:0c:
         fd:80:fa:90:83:52:38:b8:cc:66:10:4a:78:ec:bb:32:3b:d4:
         ec:14:23:e5:4d:b6:bf:74:f5:88:d4:05:97:d9:d8:fe:26:1e:
         c9:9f:b8:7d:6d:26:d8:4b:70:22:ee:9b:91:a5:28:7b:46:8a:
         94:40:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:04:10 2024 by rpki-client on console-ams.rpki-client.org