Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/928adf4b-7609-3b06-b9ce-df7e8a60e76a.roa
File:                     928adf4b-7609-3b06-b9ce-df7e8a60e76a.roa (raw, json)
Hash identifier:          HzcvD1HgGJm0fruycEcwUH8hyKZUme311eFMyopyoMw=
Subject key identifier:   2C:B8:41:1E:CA:A1:3D:C6:60:E8:18:80:37:E9:E5:1A:FA:5C:A7:9F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8DBDBD9A8E2A83867B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/928adf4b-7609-3b06-b9ce-df7e8a60e76a.roa
Signing time:             Thu 25 Apr 2024 22:43:56 +0000
ROA not before:           Thu 25 Apr 2024 22:43:56 +0000
ROA not after:            Wed 24 Jul 2024 22:43:56 +0000
asID:                     7922
IP address blocks:        107.164.47.0/24 maxlen: 24
                          107.164.61.0/24 maxlen: 24
                          107.164.215.0/24 maxlen: 24
                          107.165.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8d:bd:bd:9a:8e:2a:83:86:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:56 2024 GMT
            Not After : Jul 24 22:43:56 2024 GMT
        Subject: CN=f59ac810-9312-4738-b66f-8aef312ef56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:d9:f4:05:93:5a:5c:d3:e3:cc:c0:08:12:
                    f8:ff:05:cb:09:2d:b6:67:31:9e:74:df:6a:89:53:
                    ad:0f:8e:06:4e:73:f8:37:10:71:cb:6e:e7:94:84:
                    99:0d:42:6f:00:c4:07:8d:5d:77:19:b6:eb:fb:16:
                    55:1f:06:da:32:f4:fe:41:8d:13:b1:ba:5a:01:10:
                    2f:28:70:38:a3:d6:c8:52:83:39:51:76:bb:b0:fc:
                    cd:a9:5c:53:c7:cf:6b:49:b0:2c:c4:8c:6c:13:25:
                    17:b7:e8:ce:42:45:48:eb:51:45:86:9c:1e:63:27:
                    20:fa:82:5d:63:49:42:31:a5:5e:2e:07:77:59:30:
                    47:08:50:93:56:2f:f6:06:88:46:5e:2c:31:79:ce:
                    66:07:32:fd:b3:38:6f:96:70:0e:b6:07:93:2a:6c:
                    61:f2:6a:76:87:d2:fc:f6:9a:8e:cf:75:14:55:56:
                    91:0b:79:f7:7c:ee:94:34:3d:a3:c3:ed:ea:9a:d1:
                    46:e2:3c:1b:4c:66:60:f1:89:2a:2d:75:3e:7c:fe:
                    67:f3:6d:e2:3b:a5:8e:c9:fc:06:f5:5c:74:5e:04:
                    f7:db:dd:32:56:51:f8:e0:3c:b9:0e:0c:24:a5:81:
                    87:d6:93:79:98:6a:37:75:25:02:3b:4e:08:8a:1d:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:41:1E:CA:A1:3D:C6:60:E8:18:80:37:E9:E5:1A:FA:5C:A7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/928adf4b-7609-3b06-b9ce-df7e8a60e76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.47.0/24
                  107.164.61.0/24
                  107.164.215.0/24
                  107.165.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:76:5f:17:63:ef:7e:91:81:9a:73:39:27:d0:eb:19:31:
         78:11:03:82:1c:3b:87:0d:c5:e9:45:2f:91:cf:67:4c:9d:2a:
         b1:65:95:40:be:df:19:9c:16:f8:61:9a:2b:51:b7:ec:3b:06:
         e8:ed:e3:7a:99:2c:77:9d:67:d4:8d:1b:87:de:30:f4:40:c5:
         c5:65:bb:63:bb:33:d9:52:53:f2:32:9b:b0:dd:39:b5:a7:a9:
         56:68:0c:56:33:f5:aa:b1:04:e7:76:ac:19:f5:6c:ab:ef:21:
         cd:90:60:87:91:4a:67:de:fa:94:e7:6a:a5:bf:57:28:8e:c6:
         31:24:5f:31:43:e1:cc:27:74:42:a9:31:19:f0:4f:72:ff:ac:
         c7:f9:4b:be:89:38:6c:31:43:48:9e:6c:d1:04:db:bd:84:04:
         de:58:f2:2a:1d:af:22:c9:d1:94:b5:2a:f5:9b:4b:b9:91:76:
         28:cf:96:e2:00:1b:40:8c:43:1f:e9:b3:d3:5f:d6:77:65:33:
         2a:a0:1e:10:60:81:08:ff:68:aa:2c:56:da:cc:e9:87:c4:36:
         f1:6f:cd:1a:66:71:89:9a:35:00:4e:2f:3b:8b:0a:28:6a:8b:
         32:94:89:ff:2a:1c:ee:e8:58:ac:69:7b:a3:38:10:eb:b0:0e:
         6f:f2:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 02:23:25 2024 by rpki-client on console-fra.rpki-client.org