Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa
File:                     bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa (raw, json)
Hash identifier:          b6tBscB0xjD0+TYrgmaKXUQ6l0rSemFPTBWdnP3ln9o=
Subject key identifier:   2E:EA:1F:31:6E:4E:D9:DA:16:19:F1:07:85:39:3C:25:E3:5C:BA:0D
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858450EEACBDF6656766A7A3710C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     14618
IP address blocks:        216.219.127.0/24 maxlen: 24
                          216.219.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cb:df:66:56:76:6a:7a:37:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=fc739c8f-1f11-47bd-bd4b-e1506fef286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:5d:46:0d:1e:9a:91:50:f1:d6:9e:a0:8b:
                    ab:56:23:59:8e:c4:e3:78:ec:8c:28:4f:db:e8:af:
                    83:5c:6c:45:34:59:19:74:bf:8e:49:57:b4:0e:86:
                    bc:bb:2c:f9:0f:bd:95:7f:2e:ec:d9:44:f9:35:34:
                    b1:bb:cf:2a:5b:5d:93:2f:33:ee:18:02:4d:8b:88:
                    c8:81:17:d9:8e:00:06:99:6a:c1:1d:5c:6a:33:6f:
                    c3:00:9f:16:ca:93:08:af:67:38:97:6f:b9:a1:22:
                    1a:62:87:08:46:79:76:5f:2b:c1:a9:d5:ef:c1:9e:
                    5b:ee:b8:74:eb:ac:a7:3b:0c:83:e1:65:70:59:64:
                    46:91:8c:13:1e:a8:55:69:24:2a:12:89:34:9e:a6:
                    26:e1:df:73:90:ae:88:51:75:66:48:7f:22:e0:bb:
                    27:cb:cc:6a:e6:7f:14:90:fa:c4:1f:60:ba:02:ed:
                    09:6c:28:78:9a:09:44:08:71:ea:62:dd:b1:aa:97:
                    81:ae:1f:1c:dd:f3:40:c6:f5:c8:c8:7f:d6:cb:dc:
                    6e:63:2c:4e:64:c9:d8:f2:87:ec:a6:9c:4c:69:a5:
                    c3:f3:78:44:e4:42:2c:68:60:42:97:ae:a8:bb:f8:
                    0a:1b:39:22:3d:c6:74:b2:a8:89:c6:65:0c:27:3a:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:1F:31:6E:4E:D9:DA:16:19:F1:07:85:39:3C:25:E3:5C:BA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:68:ee:9f:4e:51:b6:bd:e0:8c:b4:d2:7b:07:37:6e:69:
         29:bd:28:7d:01:de:10:a1:b7:ed:97:42:cb:14:2c:f8:ab:fc:
         23:14:71:23:b3:d0:08:3e:5a:99:3b:2b:88:30:31:42:db:f8:
         50:b9:e6:f1:54:9d:70:97:c8:d3:08:2f:bc:c0:67:64:ac:f7:
         16:f6:ee:18:54:e2:3c:7a:e0:6c:d9:a8:15:a8:b9:73:be:b1:
         c6:18:d1:fd:4b:76:90:ea:17:71:22:87:bd:ca:bb:76:b1:5a:
         be:a8:06:50:30:d7:2e:0a:2d:a9:9c:38:48:9c:8e:8f:d2:ac:
         d6:0e:6a:3a:03:b3:23:f3:00:dc:62:f7:95:ce:50:2f:64:77:
         6a:c8:5b:82:d6:7c:0c:a5:44:c0:92:6a:f4:50:85:14:0f:43:
         fc:ec:a8:19:d4:07:88:a1:11:2f:8c:cc:67:9d:b4:ab:3a:23:
         f6:a0:1f:16:b9:cb:9b:47:8e:ae:73:48:a6:e0:b9:ea:6f:1a:
         5e:f8:3f:02:a8:4c:d8:9e:cc:fe:a2:cf:4f:9c:3b:c5:89:93:
         ad:8c:ba:5e:b6:8f:ab:19:f6:d5:74:29:c5:5d:e4:aa:72:fb:
         ce:1f:8d:21:bc:06:de:68:a7:1d:7c:33:45:b9:6e:80:fe:a6:
         60:e7:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org