Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa
File:                     9d823414-ae36-3307-b22a-ed7b04efc131.roa (raw, json)
Hash identifier:          cPf2tPWArz9M6vroRpbPwEWgiiyGTbWUgqWGrXdnt7s=
Subject key identifier:   D4:0A:09:99:C9:CA:C8:5F:6D:57:35:9C:19:4C:E8:8B:4D:DB:23:E1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844DC416D9AF0B83FB945040980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa
Signing time:             Sun 11 Feb 2024 22:28:48 +0000
ROA not before:           Sun 11 Feb 2024 22:28:48 +0000
ROA not after:            Sat 11 May 2024 21:28:48 +0000
asID:                     6939
IP address blocks:        216.218.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:41:6d:9a:f0:b8:3f:b9:45:04:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 11 22:28:48 2024 GMT
            Not After : May 11 21:28:48 2024 GMT
        Subject: CN=3b7977d4-7507-4014-a75a-0eaa7e991df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:99:3d:26:6c:a8:f3:f5:c8:12:93:09:18:
                    a8:51:74:b1:1a:db:39:c8:dd:42:2c:6d:4e:0e:93:
                    92:27:c1:f9:96:e3:b3:47:cc:b3:e6:0f:e8:eb:8f:
                    ce:8e:b0:2d:42:e0:66:89:c3:de:8d:bb:f8:d0:1e:
                    1f:a0:90:59:91:6b:c8:1e:af:86:82:69:62:38:35:
                    3c:5f:09:fa:17:e6:52:fd:da:18:1f:d9:bc:23:4a:
                    e2:c4:50:f9:6a:8d:65:96:41:7c:b6:d8:98:de:c5:
                    ca:16:19:40:e3:71:5d:91:5a:99:22:9b:f7:8f:13:
                    ac:d4:80:cd:22:de:b3:f5:88:a3:b5:55:44:dc:6d:
                    eb:63:9f:ab:d6:36:97:34:3d:52:6e:96:bf:31:9f:
                    b0:f2:6c:42:18:d7:c7:19:05:bd:c5:c3:c3:91:d0:
                    be:c0:72:3b:2b:86:9b:1e:56:d1:92:bf:35:92:c5:
                    1e:cc:4b:5e:02:e3:c8:72:db:a4:7e:2f:85:86:08:
                    5e:32:32:3d:ef:62:4b:d8:eb:72:89:d2:09:20:7f:
                    f3:33:6c:09:ea:81:fc:e9:af:2e:b8:a8:30:9b:6d:
                    a8:30:e2:4a:d1:3a:6c:b7:f3:0b:b4:a6:0b:37:cb:
                    0a:90:9e:ce:75:18:ec:35:a6:48:8a:36:fd:3f:56:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0A:09:99:C9:CA:C8:5F:6D:57:35:9C:19:4C:E8:8B:4D:DB:23:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:32:f0:32:c4:15:ef:59:da:5f:62:f6:ec:03:52:42:4b:
         78:02:bb:db:95:30:dd:a2:7b:54:ef:2a:c7:87:6f:d6:25:d0:
         13:9b:7c:f9:fb:9e:cf:2e:6c:3e:03:78:e3:a5:06:09:c8:48:
         8c:24:d8:62:53:40:64:bc:91:9d:d1:ea:d1:00:b9:72:d1:ca:
         72:fe:ec:f1:2a:86:02:ae:b3:34:4e:b2:78:aa:58:9c:83:84:
         6f:50:a7:4b:f2:ff:11:c4:da:02:e8:f9:60:58:cf:05:cf:2b:
         12:c9:cc:1d:9f:60:2e:c5:b1:23:2e:9b:4c:58:69:f3:24:47:
         1c:8a:da:f1:50:42:4d:3a:f2:b5:80:8e:b8:0d:3b:a2:22:21:
         e7:4c:34:dc:2e:71:3f:1b:35:68:ce:fe:8d:6c:fe:1a:85:11:
         01:99:29:72:32:de:a9:e9:b2:08:71:0e:c5:7a:87:08:6d:78:
         54:ba:63:07:67:b9:22:68:78:9d:dc:98:53:7b:ac:b8:a6:0e:
         e5:a7:3d:bd:2c:76:d6:1d:ac:b7:96:55:96:cd:41:d5:c1:6d:
         a0:0c:6f:a5:8a:1f:27:41:c7:98:37:e6:46:08:77:b8:be:20:
         b8:41:c9:da:89:30:3f:be:65:07:9a:01:61:8a:85:f3:05:52:
         21:da:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:18:05 2024 by rpki-client on console-ams.rpki-client.org