Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/833a7c6a-e0f4-3cc1-87e6-5b3ca884c7a3.roa
File:                     833a7c6a-e0f4-3cc1-87e6-5b3ca884c7a3.roa (raw, json)
Hash identifier:          FC7S5KBkpBDjtF20VUrAoi/Hla1W1HvHfa07Zduj+70=
Subject key identifier:   27:BA:20:7C:05:94:AD:F4:F1:C3:4C:BE:55:97:07:DF:EE:32:20:82
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584507F023AC8CF96C17D85EE580
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/833a7c6a-e0f4-3cc1-87e6-5b3ca884c7a3.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     400804
IP address blocks:        216.126.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:23:ac:8c:f9:6c:17:d8:5e:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=deb1b338-2dbd-4382-a6dc-d72f9e914e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ee:35:23:8e:65:64:07:3a:43:ac:d4:4a:85:
                    92:c2:ea:28:45:f7:5e:d9:e7:98:90:56:45:d6:25:
                    97:99:d0:d3:77:db:14:1e:77:83:45:a0:a1:43:5c:
                    5b:57:97:61:a2:5c:d2:5d:2c:d1:bb:92:b0:c3:3c:
                    0a:f5:59:8b:3a:f2:1b:70:ee:21:d7:18:23:5f:8a:
                    1d:73:a2:a1:06:22:2d:a8:34:07:ae:a4:87:cd:00:
                    24:3d:0d:33:4b:75:ca:03:04:be:3a:55:44:b4:7a:
                    23:27:21:05:1d:9d:7e:0e:49:c2:d0:7a:13:3b:52:
                    2b:96:52:fe:96:6c:e7:a5:4a:2d:ef:dc:e4:ec:90:
                    57:0f:a7:b4:df:78:80:ea:29:cf:ba:d5:5d:38:4e:
                    d5:53:c8:be:a3:60:33:fd:33:bc:b8:ed:8f:67:29:
                    40:94:63:79:19:53:78:34:e5:0c:45:cc:3d:c0:70:
                    a5:ad:82:91:7b:4e:15:0e:53:04:b8:86:86:c9:fe:
                    ea:75:ba:66:8e:27:53:5b:b8:0c:ea:9d:ef:b9:66:
                    06:d6:f1:6e:7e:f5:ce:01:04:97:f3:cc:9a:8a:11:
                    45:99:af:24:93:9b:f1:0d:83:11:92:dd:57:67:00:
                    1d:aa:22:d0:d0:33:9b:fd:63:8d:a5:6c:20:33:05:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BA:20:7C:05:94:AD:F4:F1:C3:4C:BE:55:97:07:DF:EE:32:20:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/833a7c6a-e0f4-3cc1-87e6-5b3ca884c7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:2b:21:7f:4d:98:b2:4e:78:0b:36:e7:6c:2c:7b:5b:50:
         c3:d7:ca:ed:02:4a:8a:af:3d:97:8b:70:29:f9:35:27:51:4d:
         2f:9d:81:be:bd:c8:63:16:b7:5b:29:ec:1f:f7:42:58:0a:a2:
         38:80:af:3f:75:94:15:e5:d6:5f:6f:7f:9d:aa:9a:d1:b5:33:
         cc:1c:58:bc:f6:c2:cf:c9:89:56:55:a9:90:de:d8:cb:aa:e4:
         0b:d3:9d:a0:a3:e7:f0:e9:5d:14:5b:3b:fd:4a:d4:90:a5:83:
         b5:64:22:c4:62:39:6e:07:9b:f5:fc:93:9d:23:f5:d2:82:e3:
         03:3c:b1:fa:7b:24:fb:00:f1:32:d1:01:35:2c:c4:56:de:15:
         1d:ef:d2:25:e9:d0:32:bd:2f:9a:99:23:cd:60:3f:6b:37:94:
         e9:fb:da:b0:b3:f9:4f:5e:39:fb:5c:d8:97:4b:72:23:57:0c:
         4c:f7:00:91:10:25:37:d7:f0:37:92:42:a4:52:24:bf:1b:24:
         22:76:59:4c:cc:0f:ac:00:67:c6:07:7d:ac:81:f6:03:ef:c2:
         2e:36:0d:50:99:dd:94:6b:11:3b:a0:29:93:75:db:2f:1d:21:
         42:5a:b6:b9:f9:d6:2b:ed:a1:9c:96:94:d1:8e:20:9d:9e:1c:
         4a:ed:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:15:03 2024 by rpki-client on console-ams.rpki-client.org