Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7e32b171-88a1-30f4-9af2-56aecb743b47.roa
File:                     7e32b171-88a1-30f4-9af2-56aecb743b47.roa (raw, json)
Hash identifier:          Rn6QyRwvhxfrnBH71n2z0MMsxMv+jxIf5gNf1AqKdXg=
Subject key identifier:   99:FC:2D:59:50:BC:CC:9D:98:9E:C0:A6:35:49:61:88:25:47:7C:CD
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F432858455762C8BAA53E0C1BCEFE1D80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7e32b171-88a1-30f4-9af2-56aecb743b47.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     395898
IP address blocks:        147.124.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:c8:ba:a5:3e:0c:1b:ce:fe:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=78decb06-2733-48b3-8143-818cf4bc573d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:04:a0:ae:30:e2:8b:dd:f0:72:b5:1b:87:
                    99:75:fb:b1:78:95:7e:63:aa:9a:4d:72:12:8e:05:
                    2c:05:bb:81:dd:71:33:34:2b:48:04:1c:8b:3d:3d:
                    d1:59:2b:2c:33:a5:8a:31:f2:4a:59:b0:41:79:7e:
                    49:2b:04:d3:b0:1a:5c:a7:92:ed:c5:4f:c6:6e:4b:
                    0a:a7:05:b8:6c:bc:c1:e0:be:95:d6:b7:af:c1:c4:
                    1a:53:62:55:b3:26:7f:f4:ce:07:40:78:a7:3e:93:
                    8f:21:64:e8:47:89:90:9d:bd:01:c3:f7:ae:83:76:
                    9a:86:bc:fc:51:80:be:2a:a3:e6:58:e1:67:28:70:
                    75:ec:09:b5:16:f3:76:3f:65:a0:1c:9f:53:25:c4:
                    33:5a:aa:4f:35:c2:f8:be:38:9c:3b:bd:2d:7a:5c:
                    77:44:e9:3c:e3:d6:75:34:af:85:51:94:d1:16:7c:
                    e5:8b:92:b2:62:f4:6f:9e:07:e7:f2:e3:d2:e8:66:
                    2f:9b:8d:85:ee:9a:9f:db:5d:f2:88:d5:4c:c7:ae:
                    73:4b:ce:6d:e9:24:2e:3e:7b:44:47:75:23:8d:0f:
                    2b:86:1d:69:18:f1:e4:94:e5:b7:77:c6:05:32:b4:
                    8e:0c:14:91:d0:fc:b4:ef:d3:3b:0a:7a:15:f0:b4:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:2D:59:50:BC:CC:9D:98:9E:C0:A6:35:49:61:88:25:47:7C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7e32b171-88a1-30f4-9af2-56aecb743b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:6e:6f:a6:87:7f:d5:9c:47:f8:5d:92:c9:8f:bf:b5:34:cf:
         8b:84:46:2a:94:05:b3:28:c0:67:b1:be:38:d9:24:06:d8:4b:
         26:65:ab:32:cf:38:7f:4e:d3:2f:86:c8:de:b6:ab:0d:f3:09:
         d3:ad:38:0e:51:2d:ce:b7:e5:45:23:bc:1e:4d:77:92:f5:9d:
         82:2e:24:52:7b:92:c2:19:c7:6b:c9:06:27:6e:11:9f:02:e3:
         2e:26:95:10:ec:ca:ea:74:b4:8a:4c:4f:a0:7a:8b:f5:7c:0d:
         64:4e:a7:4f:72:2a:06:2a:52:0d:83:d7:df:48:3e:03:aa:ec:
         f5:a6:eb:2a:00:b3:af:bc:14:f2:b3:8b:14:e3:89:d7:83:24:
         fb:30:57:65:3e:a7:06:f9:9c:fa:55:c4:52:e0:fb:65:71:d8:
         11:15:1a:89:63:c5:e2:d8:62:1a:ef:3d:9f:d0:83:68:12:2b:
         0e:c4:16:6e:6b:47:58:37:a5:8a:4a:dd:72:2b:d3:83:b8:1f:
         59:be:4b:59:5e:d0:21:d0:f9:33:4e:1a:a2:8d:97:d0:f2:6c:
         0f:c6:e9:c0:34:31:26:8d:c0:11:9a:dd:f4:75:33:fe:f3:cc:
         da:8a:51:06:c8:e6:09:a4:d8:10:5e:fb:fd:85:d3:ff:0b:1c:
         e9:78:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:30:37 2024 by rpki-client on console-fra.rpki-client.org