Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b6f5a23-7dd5-3c9d-9a6b-50b2ace104ce.roa
File:                     6b6f5a23-7dd5-3c9d-9a6b-50b2ace104ce.roa (raw, json)
Hash identifier:          lT6a7u8YhSYiVML0aUWPATP5mXR94YTyf59xMyJTTSk=
Subject key identifier:   25:C6:CB:68:25:A0:39:A3:5C:C7:AE:8A:D4:0C:3D:09:93:CB:F9:66
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845A58DED102E13F6BCFD29D818
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b6f5a23-7dd5-3c9d-9a6b-50b2ace104ce.roa
Signing time:             Wed 24 Apr 2024 01:00:24 +0000
ROA not before:           Wed 24 Apr 2024 01:00:24 +0000
ROA not after:            Tue 23 Jul 2024 01:00:24 +0000
asID:                     394230
IP address blocks:        216.66.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a5:8d:ed:10:2e:13:f6:bc:fd:29:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 24 01:00:24 2024 GMT
            Not After : Jul 23 01:00:24 2024 GMT
        Subject: CN=939f4f92-a9c2-4eb7-a41b-ddef3b9bf0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:da:d3:51:c6:58:5c:78:94:54:1a:cd:b1:
                    03:a2:c2:fb:0d:0e:bc:2d:31:b7:73:44:2a:fe:98:
                    8c:83:83:c1:3a:55:53:6b:43:63:ed:9d:36:48:9e:
                    0e:e0:e1:27:26:ba:be:64:8d:22:95:82:a9:a9:f5:
                    c1:0e:1d:0c:c8:55:99:ff:b4:4b:99:af:7a:f0:26:
                    2b:11:a2:34:d6:84:fc:3d:b6:ed:76:0c:93:52:5d:
                    ad:62:5c:83:8f:3d:13:98:40:9b:16:d4:b7:66:f8:
                    c6:3a:ef:31:87:e1:41:54:1e:1c:8f:6d:72:2f:af:
                    92:9b:c3:44:35:94:b7:aa:8c:05:1b:77:11:5b:5e:
                    81:07:91:b2:f9:aa:df:76:00:af:b4:ab:b3:be:dc:
                    4b:4c:97:51:5c:61:0b:c8:0f:60:14:45:16:55:78:
                    8f:b3:bf:21:0d:ec:30:03:f7:d1:4e:7d:3b:94:79:
                    b8:81:e0:7f:3a:de:7d:4c:62:db:bd:78:77:75:b8:
                    02:cb:2a:8e:43:6c:24:a0:14:46:e8:61:dc:1b:aa:
                    1b:95:b3:be:31:69:08:b8:51:da:b0:b6:48:72:67:
                    62:de:55:70:99:30:33:b5:78:9f:1b:3c:13:8d:69:
                    fc:41:29:a4:33:db:96:bb:ab:a4:b9:fb:22:21:10:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C6:CB:68:25:A0:39:A3:5C:C7:AE:8A:D4:0C:3D:09:93:CB:F9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b6f5a23-7dd5-3c9d-9a6b-50b2ace104ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:41:c3:18:bf:94:91:1c:d2:62:1e:f6:e6:5f:e3:7b:37:21:
         6b:20:bb:a4:09:48:e4:3c:ad:de:66:eb:e6:87:f6:02:0e:67:
         40:e7:96:83:81:d7:b5:26:be:8e:40:44:6a:f0:16:3a:b9:ff:
         5d:f4:b8:7b:6a:9c:4e:07:a8:32:cc:d7:17:be:33:94:f5:82:
         31:e9:95:39:65:6d:b6:57:3d:ed:c5:64:cd:db:e5:3d:96:97:
         8b:a2:25:f1:2e:b6:b2:8d:82:c5:33:39:24:86:05:d1:ac:d6:
         8c:78:bc:89:58:de:33:ef:16:db:4c:00:94:48:2c:9f:b9:79:
         7e:45:b2:23:eb:b9:67:79:94:22:f8:8d:48:40:72:38:b4:e2:
         25:1e:f5:32:3d:f9:15:6e:e1:70:35:be:a9:3f:c8:68:13:35:
         a9:6f:70:8d:d9:d4:7d:6d:d6:48:0f:b5:86:c3:73:9a:0e:05:
         d6:f3:5e:77:14:df:d1:ac:91:f9:ed:e6:43:ec:29:76:8a:ea:
         1e:b7:d7:1a:6b:7e:f8:ec:94:56:00:d0:d7:e9:f1:a4:dc:2f:
         11:b8:df:07:d3:4f:63:5e:b1:5d:f4:62:b7:28:b1:e2:ec:7d:
         b1:34:1f:cb:f8:78:b2:ee:ce:af:88:57:79:cc:a4:f5:9d:1b:
         e5:be:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:10 2024 by rpki-client on console-fra.rpki-client.org