Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c307a64a-95ec-314d-b557-5220c6d655be.roa
File:                     c307a64a-95ec-314d-b557-5220c6d655be.roa (raw, json)
Hash identifier:          UHFkBoLnz6mlq9Iw+Rb6aVwrChGZuGecZ8gjOxVQKIs=
Subject key identifier:   D3:19:33:24:61:E3:28:DD:7C:F2:78:AA:E0:02:D9:B8:E1:5B:59:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89573937B3B5C4A8379A980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c307a64a-95ec-314d-b557-5220c6d655be.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     36103
IP address blocks:        216.218.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:73:93:7b:3b:5c:4a:83:79:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=b373433b-6be0-4acd-879c-875d15e991e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:f3:21:3a:1b:d0:4f:c8:09:66:73:53:c6:
                    8f:91:18:26:b9:79:9b:c6:33:d1:12:65:e2:ff:42:
                    60:12:f5:93:65:28:04:64:5e:74:cc:05:49:60:88:
                    2e:91:61:04:8f:01:09:30:6b:5b:65:85:9f:09:ea:
                    97:35:16:98:0d:46:42:65:10:d0:1c:d5:47:af:83:
                    36:4c:39:f6:d1:9a:10:99:84:72:03:0e:b4:99:be:
                    b6:ff:55:96:da:e9:d8:4a:06:24:cb:7b:15:20:45:
                    7b:79:fb:60:67:14:5c:a1:34:43:f3:2b:f9:88:bb:
                    81:21:f2:13:0a:e6:4d:a2:fe:84:aa:c7:17:7a:4b:
                    14:b2:06:f2:d3:a7:cd:2c:c5:3a:26:79:6f:f0:2f:
                    57:57:47:0b:55:8f:38:c8:90:fb:85:a8:32:13:6a:
                    29:38:8f:93:39:ba:3c:f8:2b:87:b4:75:35:37:8e:
                    d9:80:f5:cf:55:d7:0f:83:72:73:58:66:21:19:68:
                    46:5b:e6:36:5e:1a:ff:3c:e7:f9:89:9c:ea:07:f0:
                    1c:cd:75:ee:d7:6a:0c:7a:99:55:68:71:62:b5:ea:
                    d0:19:36:4b:7e:8f:2b:3f:45:72:b6:7b:e7:68:06:
                    78:3f:a1:f5:29:5f:b0:62:86:b2:cb:75:fa:88:4b:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:19:33:24:61:E3:28:DD:7C:F2:78:AA:E0:02:D9:B8:E1:5B:59:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c307a64a-95ec-314d-b557-5220c6d655be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:66:b4:89:b0:9e:04:cb:43:3a:15:0c:4d:bd:ce:1c:d7:
         79:b5:a9:d2:1f:81:5b:9f:53:1e:ed:72:90:29:84:2c:2f:75:
         ac:b1:a2:94:ae:a8:f0:d5:3a:49:e8:ee:94:dd:e8:3d:6a:2a:
         a1:a3:25:75:cb:54:a8:4b:df:00:f3:84:50:1a:20:45:b7:ff:
         78:5b:84:62:17:dc:3c:02:dc:2e:3d:f8:d6:80:14:d7:ff:76:
         b7:f2:df:e1:d2:7f:b2:71:78:6d:04:b3:33:c4:71:82:9d:0f:
         89:ae:b5:85:8f:7c:27:c0:c7:87:44:ec:c8:70:c4:c1:8f:25:
         9c:db:d2:9f:4a:ae:1e:5c:da:51:17:bf:b9:88:c1:c9:c4:cb:
         96:fa:4d:b0:e0:bf:00:e4:80:66:5e:4f:eb:2a:f8:fb:82:3f:
         ab:89:4e:e1:db:40:5f:31:67:6b:96:cc:1c:ad:2e:d3:c1:db:
         4b:a8:bc:92:8b:f9:b3:3a:c0:f4:4a:07:24:c0:fa:05:b5:5d:
         39:38:5f:3d:c3:76:64:4a:cd:c6:3c:a2:cf:2b:ec:ad:0a:bd:
         a2:13:46:4d:c4:6a:e8:1c:8a:6f:18:cc:11:3b:63:47:ed:f7:
         b6:e5:3c:df:c5:9f:24:52:89:8a:45:ce:29:fa:b5:d9:33:8f:
         84:d0:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:11 2024 by rpki-client on console-fra.rpki-client.org