Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
File:                     178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa (raw, json)
Hash identifier:          k2T8+Ci2D6ugdZgBye8NzhAq7Zzi4Gt+USVley5P4kE=
Subject key identifier:   AA:8F:76:16:73:66:68:89:56:45:36:76:AE:36:9B:92:5E:BD:87:41
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584583042864153DC1EAE2B47000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
Signing time:             Thu 11 Apr 2024 16:05:21 +0000
ROA not before:           Thu 11 Apr 2024 16:05:21 +0000
ROA not after:            Wed 10 Jul 2024 16:05:21 +0000
asID:                     16696
IP address blocks:        199.192.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:83:04:28:64:15:3d:c1:ea:e2:b4:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr 11 16:05:21 2024 GMT
            Not After : Jul 10 16:05:21 2024 GMT
        Subject: CN=b7183fc0-c121-41a3-95ef-84e6f632a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:eb:55:67:82:a3:ba:a5:88:a9:b3:95:40:
                    3e:10:42:a0:29:01:57:de:f0:bd:5e:83:76:41:21:
                    64:d1:12:98:d6:23:be:a9:98:94:86:ed:f8:19:c9:
                    03:86:ae:74:98:b3:b8:e1:e7:3d:02:d7:e4:9e:f0:
                    7b:ca:70:0a:7f:45:14:bf:b1:ea:bc:5a:f4:b0:ef:
                    27:00:d8:a0:f8:04:8c:ae:0a:89:0e:e4:06:6e:58:
                    6c:28:1f:82:04:17:37:5e:ba:05:a1:66:d8:87:f2:
                    e8:29:c0:8d:f9:98:8f:6f:5d:5e:c7:b7:20:e8:52:
                    3e:e9:08:f7:82:d5:9c:e7:8f:d9:a6:07:8c:b4:49:
                    36:ae:a1:4d:7f:2b:24:45:3f:78:e2:e8:04:6f:e7:
                    ae:dc:76:79:12:5a:de:0f:9d:bd:ab:b4:2a:0b:ff:
                    82:0b:61:11:1e:e0:e3:12:3a:c2:48:b0:9f:bb:a9:
                    7b:07:15:7d:97:13:15:4c:7f:2a:85:4a:d4:00:81:
                    18:e1:90:c9:17:ae:20:fb:b5:4b:82:09:37:70:b4:
                    9e:c2:38:ae:fd:65:26:9f:0d:a7:4d:93:de:30:ec:
                    55:80:71:68:ba:b9:fd:37:2a:1e:80:e4:cc:a0:aa:
                    a8:ab:cd:76:93:75:75:44:10:46:32:03:9e:dd:5b:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:76:16:73:66:68:89:56:45:36:76:AE:36:9B:92:5E:BD:87:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:8e:0d:25:f3:c3:ec:94:3c:fd:51:f7:86:72:a4:4d:e6:
         f8:e1:61:3b:ed:38:93:0e:9a:f9:3d:38:d2:3c:a9:ca:74:b4:
         e9:99:67:a6:83:ac:db:e4:d1:a2:93:39:73:7e:ec:63:56:be:
         d8:e6:e6:63:ef:52:93:92:6e:b6:6e:37:3c:b1:57:cc:95:3c:
         10:7f:d5:29:76:b6:22:bb:a2:47:e3:dc:f4:04:df:da:a1:d4:
         48:6d:f5:33:dc:1b:fd:c2:b0:26:df:11:84:fc:d6:ac:84:5e:
         d8:7c:b5:10:6a:2a:e9:b2:20:2c:a5:3f:bb:8c:f2:70:d9:d8:
         3e:88:d9:8d:da:5c:7c:69:47:fd:5a:b6:2c:d2:9a:03:2b:28:
         59:28:7b:e9:45:dc:d2:e6:1b:8c:77:71:68:4d:31:7a:3a:94:
         dc:86:6c:5b:db:9a:cb:93:81:92:6b:2a:b8:ca:5d:cc:c5:68:
         5c:81:65:68:7b:c2:59:e0:36:3c:6b:3f:bc:af:88:9e:c3:ca:
         73:61:3f:41:2f:73:b6:96:98:14:9f:20:ce:c7:b9:c0:04:d7:
         d2:e0:05:de:c5:ab:53:cc:fb:39:cc:c4:1f:d8:5b:37:6a:54:
         85:dc:4c:92:9e:38:7a:23:68:1d:84:4f:bc:0b:12:40:07:57:
         9c:31:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:08 2024 by rpki-client on console-fra.rpki-client.org