Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
File:                     2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json)
Hash identifier:          R2pp5Aiq+u/P/hTsRn+1lclzZcrmtiTq2KmxGo6u3YI=
Subject key identifier:   B7:F4:39:E0:2F:25:A0:B9:E8:1A:21:7C:3B:77:76:CB:0C:C7:25:95
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285845CB3E4C81E6E9EFB71697BFC0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     398202
IP address blocks:        209.178.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4c:81:e6:e9:ef:b7:16:97:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=d5547262-6cbe-4060-8d20-6db31a8e774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:cc:2b:eb:ee:a0:9e:bb:85:c8:ea:cf:99:
                    7a:aa:51:59:99:e7:15:a2:05:f9:54:67:da:c2:92:
                    e0:2f:c0:c2:05:96:b4:2b:e8:d2:83:7f:2e:3f:fe:
                    fa:da:67:fc:35:f8:32:c5:c9:c0:a4:3d:b0:11:1f:
                    7a:64:b7:d7:e1:97:15:17:90:ee:59:14:d9:57:87:
                    fc:01:47:31:91:e7:ae:db:52:08:1e:45:da:0a:df:
                    90:01:ef:be:af:d8:f0:65:37:84:fa:40:ea:a7:00:
                    03:86:b1:3a:63:1b:3d:ac:36:a2:df:ba:57:7c:cb:
                    b7:8d:39:43:50:3e:f4:a5:d6:4f:3a:70:2f:a5:19:
                    e3:10:56:7f:48:7b:60:1e:8c:af:77:87:b0:fa:aa:
                    6a:35:21:39:7f:ec:ed:72:85:d6:74:22:f2:0f:b7:
                    37:d1:6d:57:38:e3:b4:be:8f:2b:fa:1c:81:0a:27:
                    ac:69:e6:2d:9e:eb:d7:9a:e8:06:9a:fb:a9:dd:b1:
                    d7:73:6a:29:87:c5:5d:75:a5:d0:32:8d:40:ea:a0:
                    e1:a6:6e:0e:73:3f:a7:07:e2:42:7e:4a:1d:6d:4b:
                    18:5c:d5:e6:67:69:1a:32:2d:28:04:e4:59:26:eb:
                    d6:89:87:e9:ca:e1:5a:7c:ec:f5:09:29:e6:51:29:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:39:E0:2F:25:A0:B9:E8:1A:21:7C:3B:77:76:CB:0C:C7:25:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:07:c9:9c:2d:91:d0:02:95:44:f5:1a:c9:ae:64:ef:47:b8:
         79:f5:91:66:6b:44:0a:4c:20:05:53:17:bb:83:58:3a:65:16:
         34:d4:50:a7:ef:43:7b:f2:0f:ec:e6:cb:1e:76:1e:87:c9:01:
         82:83:62:14:5f:30:0d:2a:cb:cc:aa:fd:e7:4a:b4:f0:7a:dc:
         4b:84:5b:97:c3:35:15:eb:e8:86:5c:ae:a1:b4:11:20:95:0a:
         76:7e:49:95:e8:37:d9:71:b7:5f:9b:bb:6d:a2:5f:f1:f2:29:
         03:24:6d:f7:6e:9b:60:30:a6:67:39:7c:4f:31:eb:ac:b6:55:
         86:36:61:05:71:83:51:9f:94:5c:20:7a:f6:0d:f1:1b:ec:7a:
         08:56:26:45:2f:71:24:70:f1:30:7b:f8:c0:d3:1e:9b:aa:3d:
         07:99:5f:aa:52:06:80:40:b4:47:8f:88:7b:8c:ea:57:a6:4b:
         f9:3f:66:fc:35:03:35:a7:11:e4:63:07:22:5f:a0:9c:7e:de:
         4b:2e:e0:67:05:7d:9d:35:87:44:16:cc:53:1c:14:f5:24:7a:
         56:0c:13:27:ce:ab:4a:40:b7:80:9b:44:e7:60:aa:a5:30:a3:
         5d:ef:0c:73:42:c4:07:61:67:0d:7c:b4:fc:05:32:26:6d:e9:
         29:09:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 06:41:47 2024 by rpki-client on console-fra.rpki-client.org