Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa
File:                     52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa (raw, json)
Hash identifier:          yjWf9dMvTRwtZDET3E+YxvaZYamjAcXWLL8FkPww9YI=
Subject key identifier:   57:6D:D2:ED:03:4A:65:A0:28:65:1E:6D:F7:E0:4C:26:E1:09:5F:EA
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584511B5928DC5E6E3D8968ED080
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        208.71.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:92:8d:c5:e6:e3:d8:96:8e:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=a19d780e-25d4-4183-a9d3-cffb8b17d210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:6f:87:03:56:c1:c4:ee:41:8c:45:91:cd:
                    39:b8:55:33:d4:ec:fd:2e:4b:d8:f0:7c:a6:20:ab:
                    aa:41:b8:c2:eb:62:e5:07:65:8d:56:46:cf:c1:24:
                    f2:73:10:93:5d:73:ae:46:fa:8c:1c:57:73:be:97:
                    c7:86:f1:1e:79:e0:e2:59:d1:be:59:23:31:2f:76:
                    8f:59:c7:de:81:72:0a:13:15:08:21:88:60:2d:b1:
                    d1:10:15:dd:af:1f:81:27:8d:c3:0b:65:0d:83:f6:
                    94:25:26:68:3f:df:8b:da:04:fc:61:ca:77:1a:81:
                    d1:16:14:21:1e:29:c1:ad:13:20:bc:03:b1:3a:08:
                    7c:59:50:c1:06:34:68:e3:63:ba:9a:eb:12:4a:77:
                    2f:dd:88:8b:57:7e:8a:98:e5:a3:2d:27:85:80:9d:
                    59:a5:e4:32:59:ca:b1:4c:7c:91:8f:ab:49:e2:25:
                    98:5e:96:75:46:34:48:8b:3f:08:c8:0e:79:33:ed:
                    f6:46:3e:1e:22:b4:d8:b8:2a:c6:4e:a5:30:f4:27:
                    89:7f:50:72:19:41:01:cc:b5:c0:bf:ab:9a:14:0b:
                    05:3e:40:a9:bb:13:d1:5f:14:b4:57:70:cf:14:ee:
                    87:32:a6:53:4b:ce:fa:ba:ee:bb:b5:40:15:aa:da:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:D2:ED:03:4A:65:A0:28:65:1E:6D:F7:E0:4C:26:E1:09:5F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:72:46:e5:29:46:1d:c7:b9:56:7c:26:5f:92:7f:05:86:f4:
         2d:d4:a8:c8:69:58:98:4e:26:b0:f6:61:79:5d:39:d1:16:e8:
         a1:64:e8:43:aa:3d:5b:c9:1d:2d:71:3c:c6:9e:7f:e5:07:aa:
         53:22:88:da:91:6e:dc:2c:db:46:ac:91:91:99:84:cf:43:5f:
         6b:0f:2b:63:b5:07:43:4b:a3:59:6f:fb:f6:6c:96:7d:a6:ad:
         f4:56:d6:e7:a9:54:4d:4d:eb:26:bd:5f:54:06:2e:4e:23:42:
         a3:d0:04:2b:05:bc:e8:2f:56:9b:3a:de:68:65:1e:62:8f:fd:
         3a:4a:96:42:57:4e:de:d9:97:c4:7f:c0:b1:9b:c3:86:43:2b:
         4f:67:dd:49:f5:81:00:a3:19:21:9a:6f:25:4f:10:9d:09:b6:
         3c:7d:91:29:e1:5e:85:b6:07:84:98:4d:a6:73:8a:8e:57:58:
         66:72:2d:00:ef:1e:29:d1:90:88:55:c7:39:c0:a3:65:9f:ec:
         9a:00:96:20:b8:05:b1:aa:96:98:fb:6e:be:1a:a7:6c:6e:4c:
         20:2f:95:ca:f1:38:12:b6:17:28:58:7c:e5:3b:32:57:03:20:
         4c:d2:2b:02:4f:0f:b9:9b:de:04:d3:71:c9:47:03:5e:b8:c3:
         d1:4b:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:04 2024 by rpki-client on console-ams.rpki-client.org