Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4e355822-d027-3213-9104-5ccdfd1a46b6.roa
File:                     4e355822-d027-3213-9104-5ccdfd1a46b6.roa (raw, json)
Hash identifier:          24Rc/5FQNWqEh/U3koNBqeJSH7v/QBkVKFzbi124Hvc=
Subject key identifier:   6E:78:50:6D:D1:C3:DC:CD:77:0D:06:E2:E1:81:B9:11:18:2C:A9:EB
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584568D143DF0A7E7BDA64BA3BE0
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4e355822-d027-3213-9104-5ccdfd1a46b6.roa
Signing time:             Tue 02 Apr 2024 06:51:47 +0000
ROA not before:           Tue 02 Apr 2024 06:51:47 +0000
ROA not after:            Mon 01 Jul 2024 06:51:47 +0000
asID:                     60117
IP address blocks:        209.222.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:d1:43:df:0a:7e:7b:da:64:ba:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Apr  2 06:51:47 2024 GMT
            Not After : Jul  1 06:51:47 2024 GMT
        Subject: CN=1d7a59c5-3e73-4606-89b1-914437359df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:88:7b:4d:bb:ff:51:e7:b1:00:b6:f2:65:
                    c4:17:3b:27:01:fd:42:8d:55:c3:2f:12:5d:44:33:
                    b0:b0:66:e4:80:30:77:fb:14:77:14:8f:f9:16:9f:
                    68:d0:22:e9:4b:b3:81:90:58:04:59:7f:00:be:ad:
                    b3:a9:69:91:86:18:f3:d0:95:6c:8d:bf:32:b1:d5:
                    59:14:a0:8e:c3:89:45:47:b3:57:4d:2d:b4:9a:d2:
                    a5:1e:5b:34:0b:ec:38:6a:ef:4a:7b:cd:9a:97:7e:
                    6b:3a:0a:77:06:77:eb:f7:31:24:16:f9:4b:8c:b5:
                    d5:ca:93:e4:db:9d:df:7b:92:c0:c6:e1:f1:e1:2d:
                    d5:f5:93:b9:d5:78:31:01:05:a2:8e:26:81:2d:56:
                    ff:1e:b0:3b:21:74:e4:14:62:7c:7f:4e:02:a4:9c:
                    8f:9c:6e:66:8b:23:a8:4a:0a:58:aa:da:41:0c:67:
                    9f:27:e6:3b:cd:cc:0f:5d:52:1b:18:05:af:86:57:
                    b7:90:e2:67:15:11:c2:39:9d:91:a8:45:83:24:e0:
                    bf:20:82:6f:13:52:6a:7d:b1:2f:3a:32:db:5d:96:
                    7d:a9:3e:a2:c6:9e:aa:3b:56:d1:d8:c3:92:25:df:
                    24:29:b7:6d:db:4a:60:b9:93:bb:48:c7:3e:56:d4:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:50:6D:D1:C3:DC:CD:77:0D:06:E2:E1:81:B9:11:18:2C:A9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4e355822-d027-3213-9104-5ccdfd1a46b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:f6:a8:9f:5b:87:13:93:30:67:90:9b:18:78:e0:8d:5e:
         da:1f:ba:cb:e6:cb:14:a8:b5:e8:92:cc:90:35:e6:09:88:f3:
         d9:e0:8b:73:18:61:4b:5d:cc:2a:f6:27:67:97:20:a2:63:ce:
         cc:f6:1b:fb:a1:de:26:27:2d:ab:39:87:e7:fd:f5:1f:78:55:
         a0:e3:d3:42:e8:d1:85:2d:96:e8:de:95:5c:41:87:ed:d5:0a:
         53:c5:05:47:3f:94:ba:c9:54:19:e7:ea:69:f5:94:61:5a:c9:
         44:4d:04:0b:18:9d:92:b7:d5:29:2c:f0:b3:4f:54:52:58:c0:
         22:04:23:9d:f8:b0:d6:95:89:8c:69:38:1e:b1:84:cc:b8:39:
         55:d4:f0:1e:ed:00:e3:a2:1e:06:43:f3:b7:ee:77:34:e7:ff:
         f2:22:85:88:a6:ba:68:92:21:4e:b3:4d:87:61:ea:84:6e:99:
         2a:ca:89:21:98:0b:75:9f:d1:d3:7e:45:7d:93:32:af:a2:0f:
         73:b8:ed:6b:07:46:86:86:a9:28:93:58:07:8c:71:61:aa:b5:
         bc:f7:e6:6b:ee:21:9a:d8:fe:c5:82:4d:62:26:2c:f4:1e:a4:
         b5:9d:4e:d9:0b:8f:00:01:6e:5c:8f:53:bc:15:0b:36:59:ea:
         7d:07:84:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:55 2024 by rpki-client on console-fra.rpki-client.org