Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
File:                     01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa (raw, json)
Hash identifier:          EKXEYH1Qx4TLiHyH/ta7LSZouzQ2B7as7nizniwQEsg=
Subject key identifier:   6F:F9:90:E4:D9:E3:2B:E7:A2:D1:74:6D:03:83:A9:83:AF:E1:BC:82
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F43285845CE62F750661E1A73E2165080
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
Signing time:             Wed 08 May 2024 16:02:00 +0000
ROA not before:           Wed 08 May 2024 16:02:00 +0000
ROA not after:            Tue 06 Aug 2024 16:02:00 +0000
asID:                     3464
IP address blocks:        192.31.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:62:f7:50:66:1e:1a:73:e2:16:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: May  8 16:02:00 2024 GMT
            Not After : Aug  6 16:02:00 2024 GMT
        Subject: CN=2d6cd5c4-0510-4886-8cef-176d92bd0d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:c4:9c:a9:3f:c7:ab:25:36:78:8f:f1:84:
                    1e:81:a6:e1:35:94:6a:f1:7b:d8:a5:bb:ee:c3:65:
                    40:d0:5f:d4:c4:8c:a9:99:ba:50:8d:26:85:8f:aa:
                    cf:5c:d8:84:57:81:37:fa:c0:4c:f4:d5:6d:8b:dd:
                    29:3e:89:f9:6f:56:76:4b:a5:35:57:e3:a7:39:ba:
                    3e:39:d6:0d:4b:e5:27:25:ad:46:56:c9:fd:3b:59:
                    38:b5:b5:f0:4b:fe:d0:b3:99:ca:a7:e0:d5:2c:8d:
                    29:49:cb:1d:5f:ef:d8:c5:6a:81:ba:1c:e4:4e:38:
                    d3:36:36:46:d9:72:33:75:d6:8f:1f:f1:0a:cf:23:
                    fe:76:0f:ff:ba:d7:3c:71:13:a3:90:66:b9:1b:d9:
                    cb:2c:32:67:eb:1b:29:47:3b:9a:70:e4:b7:ad:81:
                    4a:5d:31:e6:20:88:4b:21:f3:79:bc:8d:26:bd:39:
                    02:90:03:6b:da:fd:23:56:d3:29:8d:d2:7d:73:86:
                    66:8c:07:fc:15:dd:cf:46:52:65:9a:1a:2b:95:65:
                    c7:a2:9b:9c:14:6e:3b:46:a4:36:56:7e:bf:0d:20:
                    6c:d3:d6:38:11:26:c3:b5:15:bb:00:c4:7c:01:4b:
                    e8:63:af:c1:4b:ca:7a:4c:62:ea:fa:3c:c5:47:9a:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:90:E4:D9:E3:2B:E7:A2:D1:74:6D:03:83:A9:83:AF:E1:BC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:4b:18:7c:b1:08:43:92:47:bd:02:cb:5d:0c:6c:65:3f:
         db:5f:b4:1d:67:2b:1a:3f:e3:d3:15:c6:2c:f8:6e:5b:71:df:
         8b:18:4e:ba:e8:08:ed:a4:f7:b8:56:07:e0:aa:e5:b6:76:ab:
         09:a4:ab:34:df:fc:0c:ef:0c:d4:76:e8:6c:ec:6c:0e:5a:5a:
         63:5c:07:61:a0:1b:2e:ec:3d:29:6a:d1:86:8b:d7:8e:71:73:
         3b:77:b6:91:90:50:9c:7a:00:05:3a:5a:db:98:b8:53:13:3f:
         06:79:18:a3:ba:e8:98:3a:7b:05:0b:a0:20:81:04:13:df:8c:
         b7:39:8d:ac:c7:c9:cd:ec:8e:42:19:30:8c:35:5f:07:30:67:
         18:40:3d:9b:75:59:ba:e1:61:ec:2a:e7:8c:4c:26:27:36:80:
         6c:d6:34:f6:a8:c9:aa:f4:c8:4e:3b:d8:b9:85:57:33:46:1f:
         52:42:e4:89:5b:f8:3e:63:77:3b:a9:2a:39:ba:01:b7:a0:e5:
         d6:24:02:1c:ab:e9:4c:c4:de:91:fc:ba:ae:f7:e2:bf:cd:86:
         1a:31:72:6f:4a:ae:45:79:1c:5a:f2:29:f8:d9:d7:28:11:dd:
         b2:01:0a:1f:39:b1:1d:f3:54:20:3f:9e:c4:b6:d6:3a:88:c9:
         07:90:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:01 2024 by rpki-client on console-fra.rpki-client.org