Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa
File:                     f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa (raw, json)
Hash identifier:          co+3j4/+V0U2f7Qz1u0+MkDSdQNWKItiDS5rT8JLfq0=
Subject key identifier:   23:62:DF:74:B3:68:1F:5E:EA:C5:3F:02:29:BA:B0:65:42:DA:31:79
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F43285845777DE5B311AD95E64FE74080
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     394080
IP address blocks:        172.110.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e5:b3:11:ad:95:e6:4f:e7:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=4beb0d50-cfb0-41c2-b643-be4e9b99ec55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:52:0e:d6:52:68:73:83:87:6d:a4:79:7e:
                    46:44:7f:4f:a5:92:ed:cf:3b:1a:e7:cb:24:ce:3b:
                    b1:ee:82:c6:2b:75:d2:74:57:ba:4a:14:d7:cb:2e:
                    a7:34:20:ce:37:0e:38:ac:29:1b:38:35:a3:36:ce:
                    d9:1e:a8:17:30:6a:c3:1f:73:cd:98:06:7e:57:c6:
                    f1:4a:d4:65:a7:ea:41:f6:6a:57:64:c7:d1:72:2c:
                    d7:56:a9:31:03:b7:0b:db:46:d9:bb:2a:e8:ab:99:
                    fc:37:6d:58:06:e4:ea:a0:0e:23:c8:dd:c8:53:d3:
                    a9:e7:36:4e:52:6f:9a:7b:94:88:ae:5f:06:11:b9:
                    8a:f5:67:67:d3:5a:a8:b7:9e:6c:e3:ea:c0:6e:05:
                    be:e1:88:76:99:61:1f:66:41:7a:4d:47:91:69:80:
                    32:22:c4:ac:88:4b:50:fc:81:0a:9b:cf:50:7d:6f:
                    41:ef:5e:78:98:a2:e2:a5:7f:65:27:a4:26:16:48:
                    8a:7b:7a:cb:fe:6a:e6:07:d5:32:82:7f:2c:ab:da:
                    69:8f:47:5c:62:5f:7f:fd:f6:0f:37:13:52:4b:30:
                    f9:64:d1:35:1e:08:54:35:5f:a9:39:f5:ee:de:33:
                    f8:f4:b9:f0:b0:28:15:38:ab:31:07:82:8c:89:7b:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:DF:74:B3:68:1F:5E:EA:C5:3F:02:29:BA:B0:65:42:DA:31:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:0c:fd:b8:32:57:85:0a:4f:d1:f5:df:39:ba:63:e6:af:
         d2:b8:f7:ee:b5:e0:37:0d:23:4b:9a:95:1e:a9:09:a8:da:ef:
         98:09:08:1c:25:b0:90:d7:8f:ab:03:7e:0a:4c:3f:fb:61:03:
         1a:37:6b:ca:c9:28:b7:bc:bf:12:6c:42:0c:4b:56:c9:87:88:
         37:6c:f7:84:c5:96:ae:ba:98:91:14:22:f9:8b:14:90:a9:a1:
         60:2c:df:6f:bb:30:ef:26:50:4c:b3:f5:5d:21:53:18:af:92:
         0e:bc:4f:60:58:a4:40:ed:b9:0f:34:ce:29:b3:8e:10:7d:a2:
         cf:95:45:8a:8f:6c:ea:fe:7d:69:a8:9c:bd:21:d3:86:d5:5a:
         b2:01:98:06:32:07:45:57:31:e9:24:b5:8b:6f:38:2c:2d:15:
         5e:ea:0a:be:d5:88:61:b9:70:cf:57:2e:81:48:a6:20:c4:fa:
         a4:2b:34:81:aa:1b:75:87:94:a7:2b:d4:ee:2e:a8:7a:a8:37:
         43:8b:f4:39:af:19:d3:80:e6:19:4a:09:61:da:22:6f:eb:fa:
         b3:5b:30:fb:af:02:51:d0:72:41:c1:38:b6:cf:35:8f:8f:35:
         cd:b6:2b:ab:7b:c3:ab:ef:0b:a4:7b:3b:0b:60:2f:08:59:7a:
         11:4b:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:39:48 2024 by rpki-client on console-fra.rpki-client.org