Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
File:                     2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json)
Hash identifier:          dw3c/9doVggZj9LopHSq6wLYCqvaxAR0Lb0OqI1ostE=
Subject key identifier:   4E:5D:7E:DA:DB:35:4A:EB:68:1D:1F:20:C5:70:A7:CF:BA:DC:47:1B
Certificate issuer:       /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial:       010D0C9F43285845A6F371B501D50FDDC39BE140
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     8075
IP address blocks:        216.99.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:71:b5:01:d5:0f:dd:c3:9b:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=2ab74df3-1776-42f4-b144-1f08379ebf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:63:24:d8:92:2f:d1:65:1f:f3:cb:7c:e2:
                    d9:04:2f:b8:ad:c4:61:ea:14:a3:16:94:7b:b6:fa:
                    26:53:80:8c:81:30:a9:5b:c8:1c:5e:b7:ba:d9:3f:
                    5f:5f:2e:59:93:35:f4:ee:52:23:73:75:1c:19:ea:
                    3c:cf:17:25:d6:c3:44:19:83:92:2a:c3:6c:49:7f:
                    9a:59:33:7e:9a:bf:4c:e0:40:32:13:05:8b:6f:ec:
                    1f:58:be:04:b2:2e:12:68:cb:08:a1:fb:f2:cf:62:
                    f3:05:49:41:65:ab:70:f0:0d:08:1a:bf:eb:00:2a:
                    0e:02:13:e8:97:02:8c:fb:08:1f:70:55:d0:04:33:
                    75:63:17:99:11:ce:31:62:c2:d6:27:52:4a:18:45:
                    8d:10:1b:75:67:23:8a:f5:af:05:1b:e4:27:c0:e8:
                    6e:e0:b0:30:d7:66:3a:e3:bd:df:2d:10:c1:99:a4:
                    a4:43:0e:48:3b:09:4d:03:c4:1b:f9:a5:bf:1b:c5:
                    13:1a:4d:c9:71:72:67:5e:1e:d2:c1:40:48:c3:d2:
                    b6:e3:2f:9e:a8:bb:3d:1a:d7:a6:ca:1e:c4:dc:39:
                    32:00:d0:a0:f7:c8:dd:13:d5:46:fc:1b:51:81:83:
                    ac:1f:a9:39:b9:a0:48:fd:c2:ef:3c:f3:f3:db:11:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:7E:DA:DB:35:4A:EB:68:1D:1F:20:C5:70:A7:CF:BA:DC:47:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:a4:78:bb:33:b9:15:f0:43:7d:21:06:76:e1:2b:1a:28:
         30:1b:2f:a0:97:b0:25:2e:73:fc:52:65:62:30:f9:e0:4a:f3:
         3c:9a:ae:b1:e3:21:12:95:f0:42:7a:d9:19:15:4c:a5:20:97:
         9f:c5:bf:34:03:0a:b4:ef:f9:4e:ff:aa:08:3d:25:8c:3d:ea:
         f1:5b:1c:41:70:8c:55:f1:94:72:4c:5d:b7:60:8e:22:70:f9:
         87:43:c3:68:be:ef:36:fb:f0:09:87:aa:f8:25:d8:90:93:b2:
         ca:d3:ab:d3:da:83:ce:ca:4e:c2:6e:24:c3:32:5b:a9:69:33:
         b8:26:95:4f:1b:06:67:76:34:9a:d2:cb:7f:03:5a:8e:a5:27:
         a0:d5:34:6f:b2:1d:a9:c0:d8:70:3c:cc:15:58:47:b6:6c:66:
         93:b3:a4:df:62:a6:a9:e1:c7:d4:49:fd:e4:c2:e6:10:44:17:
         a4:cb:da:33:eb:4d:51:9c:29:32:d0:1e:ad:ce:80:9b:97:b3:
         dd:98:21:2d:62:a3:4f:a9:df:3e:f9:6d:ae:80:fa:4e:70:8b:
         5a:da:7f:9c:46:f9:6a:93:d3:40:56:4f:fc:e8:9e:b9:0b:f2:
         d2:21:b6:b0:6b:5d:6f:93:f6:6b:98:b3:04:af:ae:1e:1a:1a:
         fd:1a:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:37:39 2024 by rpki-client on console-fra.rpki-client.org