Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d951817b-7a97-33e1-83b7-d36374affbbc.roa
File:                     d951817b-7a97-33e1-83b7-d36374affbbc.roa (raw, json)
Hash identifier:          A5s1ssh8f/ldYMCyWWfQd7lnCpyka8Q9xpyXSQKMBEo=
Subject key identifier:   4C:27:F6:1A:17:98:20:70:74:8F:FD:2B:BC:6A:FD:E5:2C:50:B0:E8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8211CAEB
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d951817b-7a97-33e1-83b7-d36374affbbc.roa
Signing time:             Tue 07 Jan 2020 22:13:21 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        207.33.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:11:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e0d39a01-c3c6-4686-a9dd-bdb12fcaef25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:12:dc:aa:3a:2b:30:5b:38:a6:f2:cf:35:
                    bd:a0:32:da:21:46:14:57:9e:12:4a:49:84:a8:e6:
                    73:61:f9:7e:c6:50:64:9b:eb:c8:7e:5f:cb:e5:2c:
                    58:08:cd:dd:09:7a:e9:85:44:4e:d6:13:3e:61:20:
                    c5:b2:91:a0:c6:f4:eb:f1:39:7c:0a:db:a4:7d:8a:
                    0e:70:dc:68:45:a6:03:0b:90:fa:96:48:b0:3b:ce:
                    ec:b1:67:0a:eb:3d:a2:7d:82:bd:b0:0f:45:9e:92:
                    95:52:48:97:91:8b:0f:b1:2c:d9:94:72:b3:ad:14:
                    f6:09:8d:04:5b:ca:c6:36:71:1b:58:77:af:b1:f9:
                    29:1b:37:c7:4f:6c:58:84:57:93:bf:98:a9:ed:82:
                    5d:32:f3:ce:36:a2:77:b0:1c:5c:1f:d4:b3:19:f0:
                    dd:af:5f:7a:f7:0c:3f:94:ba:e1:f7:e5:aa:7f:b7:
                    e6:3d:b8:ea:05:69:fd:27:ba:7f:61:a6:4f:cb:7f:
                    80:62:c8:39:ac:01:27:3e:c5:12:5a:aa:fd:50:92:
                    2b:27:50:53:43:3f:48:ed:50:b1:eb:99:c8:c8:54:
                    7f:4e:a8:32:82:d6:81:f8:a8:76:3e:29:20:cb:ec:
                    0b:f8:b4:39:8b:82:db:5f:de:fe:66:65:39:ff:fa:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:F6:1A:17:98:20:70:74:8F:FD:2B:BC:6A:FD:E5:2C:50:B0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d951817b-7a97-33e1-83b7-d36374affbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:98:a6:c2:6a:8e:f9:5e:2a:94:97:6a:3d:6e:3c:27:eb:28:
         32:2f:25:f7:34:a6:54:77:31:5c:a9:6b:38:87:38:15:7b:99:
         bb:b1:dc:00:28:43:92:cc:b6:69:23:57:8a:41:40:98:3a:38:
         da:c8:8b:b8:4a:76:be:f0:da:fc:98:c6:86:7a:c2:3f:65:80:
         92:d1:6e:c0:3e:f2:7b:67:1e:f1:a9:31:a5:e3:20:35:99:21:
         89:da:cd:f9:d1:e5:d5:24:af:27:18:42:e0:83:af:e2:2d:e2:
         d4:8d:4c:10:35:73:b2:53:f7:5d:ea:57:c3:5a:71:6b:59:8f:
         d3:4e:2d:ef:c3:1b:59:81:96:ff:a4:23:58:bf:54:7e:71:b9:
         ff:a8:ca:fd:06:33:9c:3b:cc:c7:46:b1:5a:00:f9:fd:56:98:
         35:7a:16:0b:6e:ca:fb:b1:91:7b:10:27:47:45:ec:5c:2b:33:
         30:88:74:48:53:b4:b3:1c:92:05:fe:f8:0f:26:fe:d0:5f:6a:
         ab:30:c5:07:bc:12:81:bb:d2:48:2d:51:58:e7:a3:48:41:99:
         b4:78:99:04:60:18:88:46:f6:99:a6:d1:67:21:6f:92:3f:35:
         d2:e9:83:30:e9:37:71:d0:17:fb:bc:68:e1:cd:2b:07:fe:f5:
         fb:1a:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:47:24 2024 by rpki-client on console-ams.rpki-client.org