Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
File:                     2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (raw, json)
Hash identifier:          thY2U8sqGsQPxKRq27uaOpyDMzJvFaynVxAIWnx/Zpo=
Subject key identifier:   A2:22:47:BA:6F:5F:4F:FC:CC:5F:18:FC:A1:22:EB:53:4C:AB:7E:EC
Certificate issuer:       /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial:       010D0C9F43285844F73008937D42ABCF13FC0B60
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        216.152.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:08:93:7d:42:ab:cf:13:fc:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=9c078ab0-8b3f-4a58-9a2e-6b15693424cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:75:56:94:96:fe:46:3f:be:f4:e0:0e:03:
                    97:85:2f:bd:3d:03:c3:c9:65:af:f3:d0:cc:3b:33:
                    e2:aa:3f:c9:af:e2:78:73:5b:7e:8e:78:43:3f:55:
                    73:82:97:c6:34:ae:5d:64:ac:15:d9:15:3d:4c:6d:
                    10:f6:2e:b3:ca:20:4d:63:78:42:fc:d0:31:e0:37:
                    5d:c8:50:f3:ef:ac:12:f3:1a:55:9c:43:d7:44:50:
                    de:bc:b7:fa:6a:ae:b3:7b:bd:bd:6f:37:53:df:af:
                    96:2e:21:2d:c5:54:b7:c4:17:6e:bf:ea:36:e5:d0:
                    cb:d9:c9:c7:64:89:bc:28:33:52:bd:b0:dd:c5:15:
                    b8:18:d2:cd:d2:d3:f4:bb:32:30:84:38:1f:ed:64:
                    ef:d3:ef:47:7e:db:b6:98:cd:2f:4f:d5:e8:7a:60:
                    c9:37:61:20:4c:ff:6b:91:af:ed:54:c8:71:9f:d4:
                    ea:e0:bc:d4:ff:ca:28:a7:76:b3:e5:04:9c:d7:1a:
                    5d:54:5c:b6:5e:49:43:33:8f:6f:55:3e:29:de:d5:
                    11:61:32:59:87:2d:17:c4:54:1b:74:a4:80:3b:c2:
                    f5:dd:2a:9d:b6:15:c4:6b:b9:6f:eb:dd:1d:5b:00:
                    49:42:59:e0:65:54:11:db:b2:62:2b:56:7a:90:6d:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:22:47:BA:6F:5F:4F:FC:CC:5F:18:FC:A1:22:EB:53:4C:AB:7E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl

            X509v3 Authority Key Identifier:
                keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:64:29:22:44:89:3d:0c:e7:8b:a0:47:ec:f2:9f:72:e2:b9:
         20:85:60:01:a4:e4:2f:85:47:87:6b:95:bd:d8:32:15:b2:fc:
         37:57:5a:10:66:d1:bc:37:59:3c:25:d5:5b:9f:ae:25:8d:93:
         79:cc:e2:b2:67:25:6e:98:83:7a:2b:75:2f:93:15:ac:f8:a9:
         51:18:bc:f5:e3:88:bf:f7:55:61:78:92:67:2b:69:5d:2b:f2:
         38:c4:df:ff:b5:40:7c:95:d0:0b:d8:9d:cc:56:4b:5c:bd:98:
         08:91:c3:f8:f6:d4:5f:f2:cf:da:2b:4f:e1:65:27:a4:57:5f:
         bd:ff:6e:d0:04:77:b0:8d:b7:4f:c3:6d:49:a6:fe:ff:61:97:
         31:af:c1:d1:4b:30:39:8f:b3:63:7b:ff:95:b2:d0:f0:60:6c:
         dd:52:57:ef:82:d3:31:74:07:e4:10:b6:ac:13:53:0c:24:b3:
         dc:38:8d:8f:4c:a1:76:79:54:91:d6:10:51:13:82:a0:10:5b:
         3a:12:28:a9:75:3e:55:04:07:0e:67:67:87:d3:b2:0b:1f:8d:
         f5:07:9c:7c:c5:fe:22:ca:29:63:aa:b3:7f:2a:10:17:2b:c2:
         ae:19:df:0a:02:ba:f4:31:31:26:e5:98:7a:27:24:78:8a:9d:
         16:71:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:00 2024 by rpki-client on console-fra.rpki-client.org