Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa
File:                     c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa (raw, json)
Hash identifier:          MgrMKGwFgQw53lNXfXFP+ke5NDElqt3jhOjNiI2/LyI=
Subject key identifier:   EC:3E:3D:F2:07:A9:3D:92:5E:E7:CB:F9:71:4D:DD:E2:14:E9:D1:F6
Certificate issuer:       /CN=51dcd612-9862-4e41-806c-9ada64fefdec
Certificate serial:       010D0C9F43285845CF6E3758BF829128091D6B40
Authority key identifier: F8:87:F4:E9:1D:5D:2B:9A:88:B1:12:5F:7D:BC:9E:41:FC:40:19:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     398835
IP address blocks:        163.123.132.0/24 maxlen: 24
                          2602:fb3a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:37:58:bf:82:91:28:09:1d:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcd612-9862-4e41-806c-9ada64fefdec
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=d0acd04e-5f2c-4d86-8514-1a5c0a53c1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:96:da:29:41:f2:fc:a6:ca:2f:e4:ee:41:
                    46:59:6f:4f:6e:d9:ca:57:48:35:12:76:bc:4f:32:
                    0e:08:cc:62:d5:5a:ef:7c:9c:50:53:ca:78:07:fd:
                    4a:7b:8e:5c:45:50:b6:ca:94:cf:64:2b:06:ad:16:
                    38:de:ef:c3:73:b5:fb:06:f2:cc:c1:be:a9:f8:46:
                    71:ad:0b:4e:67:e9:78:2c:87:75:4e:8c:d0:da:1d:
                    dd:ab:76:9d:4a:72:9b:67:a3:95:9e:f9:d4:80:aa:
                    dd:fe:53:23:42:98:96:c9:61:8d:39:64:8c:36:6d:
                    83:70:02:99:08:cf:d5:c4:9f:64:92:84:ae:6c:fb:
                    31:d4:9c:4a:85:57:b2:f8:b1:0a:9f:1e:44:ca:2f:
                    ca:4f:e8:d1:e5:7e:28:d6:59:7c:4f:8c:bc:17:b2:
                    c2:a7:8c:3d:36:42:d1:f6:e9:d0:8c:06:a7:b9:c3:
                    80:e6:48:76:46:ea:ac:f0:5d:27:b3:e0:bc:c5:c6:
                    9f:b5:aa:0b:bf:48:20:56:60:71:05:16:f3:8a:3a:
                    9b:db:c4:ce:ef:ec:00:e4:35:7a:61:6b:1f:ab:45:
                    b1:9b:c0:25:48:10:78:c3:33:bf:08:36:e7:d2:a0:
                    46:6b:72:ac:5e:77:4e:2e:56:0e:d5:30:a9:12:90:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3E:3D:F2:07:A9:3D:92:5E:E7:CB:F9:71:4D:DD:E2:14:E9:D1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/c6de0dc4-dc4d-3dae-b8c0-0d6cdf2076da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec/51dcd612-9862-4e41-806c-9ada64fefdec.crl

            X509v3 Authority Key Identifier:
                keyid:F8:87:F4:E9:1D:5D:2B:9A:88:B1:12:5F:7D:BC:9E:41:FC:40:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/51dcd612-9862-4e41-806c-9ada64fefdec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.132.0/24
                IPv6:
                  2602:fb3a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:38:37:f1:95:58:c5:be:b0:7d:06:81:44:03:39:74:62:f1:
         48:1e:44:ca:21:16:42:6b:bc:9d:27:2d:0b:a8:e0:64:06:7b:
         ea:ac:06:89:80:a6:1b:22:9a:f6:7c:40:29:5e:fc:0c:93:7c:
         80:2f:13:5a:5e:b4:f0:5f:74:40:78:5f:e1:f4:23:eb:31:ca:
         7a:b5:cd:e3:9e:49:3b:32:15:25:1d:17:33:10:0c:2e:21:09:
         be:d2:4f:96:a9:ec:9a:7f:8d:8e:76:f5:62:bc:a8:70:42:45:
         7c:60:5c:24:14:45:6a:c9:f4:0a:3c:7d:b3:21:77:7e:64:06:
         e3:dc:e4:63:5c:cd:19:dc:6f:76:66:b3:e1:c7:7a:33:df:0e:
         44:44:fd:34:e9:91:aa:1a:c0:35:0a:6a:c4:0f:52:02:e1:88:
         71:93:f1:53:13:27:3a:cc:c6:fc:81:17:7a:5a:72:bc:62:f8:
         bc:3c:7e:c7:69:b9:c2:39:f4:ee:b1:1e:e7:66:ec:3c:7b:bf:
         55:f4:df:1b:17:a1:6e:28:4a:89:f9:cb:ad:37:74:74:1f:92:
         dc:b4:b4:c8:77:f5:ff:41:a5:57:05:e4:8c:57:e7:0c:fe:f3:
         19:fc:74:33:83:d1:fb:b5:52:1e:15:01:fe:53:92:ee:6e:c0:
         fd:c2:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:40 2024 by rpki-client on console-ams.rpki-client.org