Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
File:                     4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa (raw, json)
Hash identifier:          L+1kp1wffWYuoSyMfuAxRmubS6XSwMptuSXA73beoPs=
Subject key identifier:   D3:E5:25:85:F3:C6:C5:CE:41:21:E3:9B:E5:20:EA:35:97:84:B9:BF
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285845F7E942F1651070CAFD611C80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     134365
IP address blocks:        107.151.201.0/24 maxlen: 24
                          107.151.200.0/24 maxlen: 24
                          107.151.202.0/24 maxlen: 24
                          107.151.204.0/24 maxlen: 24
                          107.151.203.0/24 maxlen: 24
                          107.151.206.0/24 maxlen: 24
                          107.151.205.0/24 maxlen: 24
                          107.151.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:42:f1:65:10:70:ca:fd:61:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=da340a07-911a-4a82-bd53-5cc1dd5b3b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:4a:b0:c8:d9:ba:78:12:81:fc:7e:f3:f1:
                    36:75:17:d9:6e:0f:fc:05:9b:4d:13:15:38:de:cf:
                    68:58:7d:b3:51:9a:8b:a0:6d:3c:5f:66:20:fe:6f:
                    22:b7:4a:ca:d8:da:5a:f4:4d:8e:47:80:f9:29:9f:
                    e0:f2:aa:19:2b:f5:f6:32:1a:62:a3:6d:e2:5c:68:
                    de:8e:5b:c0:c8:b1:77:a9:cf:ef:76:32:d7:b6:df:
                    91:42:d3:33:8c:19:e4:5b:cf:63:dc:f6:bd:d4:ff:
                    7d:d9:44:52:db:08:61:47:60:2d:1b:21:e5:32:0a:
                    d6:65:18:ff:d0:58:09:48:a9:2f:49:b5:22:2c:a4:
                    13:99:5d:27:ff:92:90:29:2b:55:49:6e:21:e5:9e:
                    59:10:b6:0c:33:28:aa:b7:0e:76:43:01:00:57:f6:
                    75:3a:29:6c:dc:e7:03:83:46:8c:97:f0:ea:58:92:
                    0e:4b:4c:19:19:02:8e:2f:97:5c:27:83:8f:64:a7:
                    4b:e4:e7:fe:4e:e6:68:d6:6b:6b:e5:b8:41:6d:96:
                    26:04:89:f6:3c:f1:62:51:fe:b1:8b:85:d1:69:66:
                    a4:8e:ee:67:b6:3f:63:37:8b:66:c8:dc:9c:5b:6b:
                    e9:ad:a4:b0:59:c8:28:8b:c2:99:6b:45:1a:e2:c4:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E5:25:85:F3:C6:C5:CE:41:21:E3:9B:E5:20:EA:35:97:84:B9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:30:93:0b:b5:1e:28:b0:a6:19:cd:d8:3e:b7:1d:02:f6:
         43:55:91:c8:12:66:88:14:ce:03:ec:9f:0a:39:c4:2c:c4:f7:
         97:31:cd:de:07:be:fc:af:0d:0c:72:71:18:5b:0f:73:58:4e:
         84:0d:19:55:4a:56:e4:af:11:00:e7:2f:89:95:89:fe:21:40:
         72:04:de:01:ff:41:48:35:9c:10:d3:44:a1:74:5c:00:f6:fe:
         87:fb:ea:c6:cd:9e:3d:62:4d:8d:17:02:ba:7c:07:30:e5:9d:
         83:63:bb:88:eb:8e:8c:62:94:ac:75:25:a3:65:a3:99:a8:90:
         57:71:1c:6b:57:6c:2c:33:ca:ca:6c:20:96:25:53:e5:fe:24:
         a2:4a:85:bb:61:69:9d:40:a4:7c:0c:f7:c4:0b:35:d3:59:4e:
         c2:5a:6b:f1:82:d4:13:0a:1a:c9:79:98:2c:e9:33:aa:b8:40:
         19:8d:87:82:37:d3:5f:a2:e7:6e:49:f8:32:31:a6:2a:be:00:
         4e:0f:6e:3b:38:52:de:b8:ca:18:e2:e6:2d:ea:c3:aa:36:17:
         59:82:7e:58:bc:5d:61:fe:b1:c5:88:3c:53:c8:24:12:d3:7c:
         ea:3e:ce:80:5f:f5:59:d6:a2:4b:61:a8:c1:23:61:3f:e1:fb:
         fe:5e:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:54:25 2024 by rpki-client on console-fra.rpki-client.org