Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
File:                     17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa (raw, json)
Hash identifier:          gfCdXyJgN5I0AhYj4QlHAXfwE+lXfr+JAvmUsiCoG4I=
Subject key identifier:   99:4A:17:7F:74:72:BF:BE:E5:BC:0D:9D:CF:E9:76:D6:0B:E7:EA:B3
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858458C6DCC32E0853D5C25351C80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        216.115.220.0/24 maxlen: 24
                          216.115.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:cc:32:e0:85:3d:5c:25:35:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=79e38681-e041-471a-a032-5afe3f85cf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:46:bc:f5:43:28:8a:1d:34:c7:b2:fe:15:
                    36:3f:25:c4:4a:51:8c:c2:de:6d:94:f8:6a:22:9f:
                    3c:0b:81:85:1e:e3:b0:83:6c:8f:7c:5a:16:fc:41:
                    12:83:ff:fe:f6:43:4c:16:f4:37:c8:5e:c8:df:0d:
                    e1:ce:11:eb:0c:d5:e1:7c:75:53:08:dd:a0:6f:51:
                    f8:40:88:51:ed:3b:20:a3:48:22:f8:0a:1f:17:eb:
                    c0:af:69:f2:d4:31:f2:28:21:39:ad:a7:6c:5d:74:
                    3b:7b:b3:9d:d6:60:ce:75:03:82:c1:3a:84:07:20:
                    a1:e7:38:eb:8a:9a:d6:9c:15:ab:6e:8c:fc:c9:aa:
                    e5:ad:a0:bf:e8:5c:03:54:c8:63:9d:4c:2a:4a:5e:
                    3c:97:ee:cc:a5:49:fc:83:cb:24:a0:0f:cc:b9:7d:
                    f3:c1:22:9e:bb:d2:ca:5d:dd:3a:45:91:af:d4:fa:
                    99:9a:63:60:75:19:11:a0:99:da:39:61:ed:87:0b:
                    c8:7c:a7:7e:13:2c:29:62:a4:93:fa:6f:18:a8:82:
                    e7:1d:5a:3d:ef:21:61:26:65:d9:8c:f0:09:65:bd:
                    11:5c:cb:9d:ce:0a:f0:20:51:97:d6:fa:36:0b:49:
                    54:c1:db:38:8f:5f:35:ec:82:b8:df:fc:94:dc:03:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:17:7F:74:72:BF:BE:E5:BC:0D:9D:CF:E9:76:D6:0B:E7:EA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:0c:95:31:cb:ac:6e:f9:cd:c9:ee:05:fc:ae:c3:7e:fa:84:
         11:ef:b5:d3:05:a1:a4:d4:83:92:a4:48:67:cb:5d:c5:ef:80:
         fb:d0:43:98:76:3e:52:5a:98:10:85:04:1d:f5:53:83:2f:14:
         57:b1:4c:6a:ee:f1:41:01:24:05:73:a0:a1:8f:7c:23:4d:a5:
         30:8f:19:05:fa:bf:8a:c2:30:9d:9b:14:fb:15:0c:2d:7e:a7:
         b5:85:14:ce:3d:9f:18:7c:b4:49:56:7c:51:f8:02:c4:45:55:
         d6:8a:17:f6:fe:8e:aa:12:99:29:e4:a5:79:bc:8d:df:47:95:
         f3:6a:d5:a4:2c:c9:5b:85:29:dc:86:97:78:52:39:a9:de:70:
         2a:5f:8b:7f:c8:4a:6d:f4:7b:44:c9:62:19:75:b2:bf:a1:ce:
         ab:0c:9f:ef:c7:84:ea:f2:bf:34:22:34:25:82:fa:91:fe:bc:
         22:8a:83:b3:55:a2:b5:eb:2c:bf:e3:5c:9c:a2:77:ac:6a:8f:
         0a:9e:71:4e:8e:f5:46:f4:87:26:e0:cc:7b:5a:ed:15:5a:17:
         46:f3:ea:95:b7:bf:15:65:43:ee:b2:1a:81:54:dc:16:06:03:
         b4:78:1d:6d:2d:5c:12:a1:3e:b4:ed:a6:ce:a9:84:fe:44:c1:
         a4:95:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org