Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa
File:                     8b31b81d-fea4-39b5-ae00-10422f17363c.roa (raw, json)
Hash identifier:          40X27Yn1NHJyZQhrVtuDr+9RMpfpbEahMo5a/xKVSfU=
Subject key identifier:   2A:69:BD:BF:6E:A7:12:ED:2B:0C:C8:6F:A2:48:45:8C:1D:79:45:40
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844F5CAA380E4DBF255E32CEA80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        173.199.29.0/24 maxlen: 24
                          173.199.8.0/23 maxlen: 24
                          173.199.38.0/24 maxlen: 24
                          173.199.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a3:80:e4:db:f2:55:e3:2c:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=2bc40c47-1978-4874-84af-8387f3f11e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:bd:c4:9c:9a:cf:2d:9e:59:3e:3b:84:a3:
                    2f:54:86:ab:97:07:a9:47:e2:65:58:e6:7c:6b:a0:
                    ff:a8:7a:35:6b:33:10:ca:4f:29:99:07:ea:49:1a:
                    e3:05:18:94:42:cd:9c:87:3b:c3:37:f6:19:4b:30:
                    f1:c5:6d:66:b8:05:f6:61:3f:fc:d4:f0:bd:1c:b3:
                    fd:3c:5c:24:9d:ee:aa:ef:9b:29:02:96:77:9d:f1:
                    f5:69:96:ff:51:ef:0c:9c:fa:94:0c:dc:06:56:89:
                    1b:d4:94:fe:7f:f3:a4:e9:57:3e:3f:1f:28:53:fe:
                    ac:1d:2f:dc:20:c2:98:f1:c5:db:33:a3:7b:a2:b9:
                    bb:72:05:c4:12:43:5d:2c:43:79:a6:d2:90:f7:e8:
                    5d:2f:6a:5a:51:4e:ed:f2:d1:a0:91:58:d7:21:aa:
                    f1:7b:87:ac:d2:ce:c1:97:39:c9:fb:81:e7:80:6b:
                    5c:28:0f:9f:d8:31:b4:f7:26:53:b5:4d:6e:62:0a:
                    c8:c0:6b:96:55:37:4b:5e:0f:75:82:37:b2:63:b6:
                    fd:8c:68:5c:fa:7b:41:2c:8f:01:fe:08:df:95:4e:
                    69:5c:d2:68:90:16:46:36:46:88:b5:86:86:15:aa:
                    47:f6:6b:4a:9d:85:bb:1e:3f:ac:a6:96:2c:a1:0e:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:69:BD:BF:6E:A7:12:ED:2B:0C:C8:6F:A2:48:45:8C:1D:79:45:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.8.0/23
                  173.199.29.0/24
                  173.199.38.0/24
                  173.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:99:45:1f:2d:68:28:f2:fa:94:1b:31:8f:06:0e:64:2b:
         bd:ae:1e:55:d8:61:19:3e:ee:1a:4b:a8:a7:82:48:b4:ef:5b:
         f4:e5:30:98:f4:7b:2a:99:94:8a:17:95:4b:0a:82:35:12:60:
         66:82:b9:d7:10:ef:82:03:2f:de:e2:af:da:0d:2b:20:87:f1:
         97:b6:d1:ed:b9:64:80:6e:46:cb:22:07:44:bf:c0:90:9b:6e:
         98:41:2c:5a:c0:cb:a7:96:0d:52:5f:b1:e6:ee:a1:1a:61:55:
         57:7f:b9:70:08:a0:0a:a0:85:a4:fb:2e:bd:36:e3:a7:c6:2e:
         fb:9a:95:97:f7:2d:91:8f:9f:87:47:4b:72:b6:82:d0:23:10:
         c0:8a:79:15:89:d6:d0:ea:64:0b:df:cd:88:d1:25:4f:8e:63:
         6f:f5:0c:fd:48:15:7c:c9:c5:38:c6:8e:fd:00:0e:cf:32:5f:
         6e:03:71:08:80:75:cd:6e:af:00:93:f4:0a:7e:79:67:c8:15:
         2e:f9:f7:9c:3a:37:b8:c7:2d:43:c6:d7:7f:29:52:6e:b1:82:
         63:f7:d7:2b:cc:64:e0:82:a9:db:3d:34:14:e4:5a:8b:0d:94:
         3c:41:41:6e:c6:99:99:85:75:9d:85:cd:08:06:6a:d1:91:3c:
         09:d2:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:27:47 2024 by rpki-client on console-ams.rpki-client.org