Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09717606-b4a4-3bc2-90f6-aa9245be6ca7.roa
File:                     09717606-b4a4-3bc2-90f6-aa9245be6ca7.roa (raw, json)
Hash identifier:          iFa1pdt5BJaPlQOcCbVOoPiKQrIv6etjqd1RlT3KHzs=
Subject key identifier:   39:13:B1:78:6A:96:E6:BF:50:0E:19:67:7C:64:48:A9:C8:86:B9:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845BD3B9113F6CE9AE2FBF58180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09717606-b4a4-3bc2-90f6-aa9245be6ca7.roa
Signing time:             Thu 02 May 2024 12:33:52 +0000
ROA not before:           Thu 02 May 2024 12:33:52 +0000
ROA not after:            Wed 31 Jul 2024 12:33:52 +0000
asID:                     7342
IP address blocks:        209.131.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:3b:91:13:f6:ce:9a:e2:fb:f5:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  2 12:33:52 2024 GMT
            Not After : Jul 31 12:33:52 2024 GMT
        Subject: CN=ba73c4d8-1856-4047-ac4a-1bd74e737b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:7d:28:52:ea:9f:e1:d8:85:c3:7e:e5:3b:
                    17:c3:56:b4:8a:87:4f:ce:8a:27:44:9d:59:52:b7:
                    dc:80:89:39:fd:34:0a:6a:2c:cd:67:33:01:44:a8:
                    47:0f:ac:23:4a:2b:09:a0:dc:a9:1a:75:1b:5c:86:
                    92:90:4c:2d:eb:fa:af:6a:a9:65:d3:de:0f:b1:fe:
                    65:8f:3e:ad:d9:60:22:da:e1:3a:4e:81:43:ed:28:
                    16:8f:31:05:79:b8:b9:78:11:76:cd:5b:0f:01:f3:
                    2f:ab:f3:ea:2a:e7:d1:57:95:df:34:3c:3f:92:10:
                    69:09:e9:30:ae:95:e1:c0:02:ba:95:e7:af:7f:7d:
                    20:79:16:e9:a3:b7:5c:ea:2f:23:3a:c1:d6:5a:4f:
                    07:68:67:4f:c0:de:cc:51:6a:7d:35:b6:f6:8b:77:
                    69:f9:5b:8c:c6:86:5f:1e:9b:81:8d:8a:17:3e:86:
                    bd:aa:c3:26:89:fb:98:d6:c0:f1:1e:bd:ea:b2:74:
                    d7:9d:4a:ba:86:b8:70:f7:41:8d:a4:c5:1f:fb:4c:
                    66:4b:3e:95:4e:e9:99:70:75:a3:8b:0c:42:b3:6f:
                    a1:60:32:d5:8f:72:5e:44:cf:aa:61:62:11:25:0a:
                    88:2d:fa:b9:55:ed:73:9b:79:42:2c:5d:4e:44:90:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:B1:78:6A:96:E6:BF:50:0E:19:67:7C:64:48:A9:C8:86:B9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09717606-b4a4-3bc2-90f6-aa9245be6ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:53:1c:54:a9:60:6a:56:4b:46:4f:5c:fe:36:40:67:1c:
         6f:e9:7c:5f:1f:e3:8c:c2:6a:b6:62:f3:26:76:00:95:86:52:
         58:eb:cd:9c:05:d4:8a:19:75:e2:4f:14:c4:4d:ba:72:4f:5b:
         f6:e6:34:f1:8f:11:99:57:6e:c9:b1:3b:71:1f:ba:49:0a:bd:
         be:0b:2b:34:c0:89:4f:24:3b:53:8e:a9:0c:37:b5:af:7d:97:
         20:a3:0c:3b:48:6e:73:04:57:b6:d4:31:2c:7d:98:76:94:50:
         14:20:ea:1f:18:fe:92:20:03:88:48:97:e4:24:52:8e:56:73:
         8d:82:c5:78:5e:02:76:49:b2:42:f1:4a:ab:af:e6:16:ab:9d:
         70:68:00:89:6b:80:11:cc:07:80:51:32:9b:d5:68:24:bb:62:
         06:1b:73:80:35:35:4b:c0:50:d4:8e:de:ae:8b:1c:d8:e1:82:
         a0:e7:8f:b8:c9:38:08:f2:e0:34:6a:e5:b6:a8:76:6e:ef:fc:
         40:7e:e9:d9:99:89:a9:2f:db:53:44:d4:e8:66:6f:f4:70:cb:
         d5:16:dd:9a:50:df:f2:7e:a5:fd:03:84:9b:19:c9:60:81:ee:
         0b:73:3e:08:3a:ed:9a:24:74:12:c6:ab:ab:f4:c1:b6:b7:d3:
         c3:a9:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:30:56 2024 by rpki-client on console-ams.rpki-client.org