Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa
File:                     c97910cc-243c-32df-8616-c22e1a078349.roa (raw, json)
Hash identifier:          77O5IEnaMCg+Pz6Cmob/5LES9nMSLNazNQ+yr96tIFY=
Subject key identifier:   A7:AB:A1:4E:05:29:93:80:EF:70:C4:2D:6A:7B:0E:13:A8:DB:E2:14
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845E9F3C7AEF88EE7470A59C900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa
Signing time:             Sat 18 May 2024 13:00:35 +0000
ROA not before:           Sat 18 May 2024 13:00:35 +0000
ROA not after:            Fri 16 Aug 2024 13:00:35 +0000
asID:                     7018
IP address blocks:        209.251.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e9:f3:c7:ae:f8:8e:e7:47:0a:59:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 18 13:00:35 2024 GMT
            Not After : Aug 16 13:00:35 2024 GMT
        Subject: CN=16fca724-7b5b-4967-937f-ff43e3d0ffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:37:6e:c3:39:e3:7e:79:3b:95:02:0d:96:99:
                    e9:44:b7:2d:bc:d3:6b:c0:01:44:dc:af:61:5e:42:
                    f4:fd:d2:bf:e6:d0:41:da:71:1c:c3:1c:93:64:74:
                    04:44:3f:59:e5:89:66:ec:72:78:4d:14:ee:c8:ed:
                    b9:85:c2:96:5b:b1:c7:7f:d4:d3:1f:94:77:f2:25:
                    45:a4:4c:26:6f:b0:40:75:0a:11:f0:24:62:5c:79:
                    04:b0:15:bc:19:8b:c5:18:c5:6b:cf:bc:ca:8b:b8:
                    1f:80:26:6c:b2:a9:4a:51:51:60:21:89:31:4c:8f:
                    c1:47:9c:4b:5f:17:cf:23:70:df:f6:66:91:cb:98:
                    c4:59:41:a5:0f:7c:5a:ee:25:03:be:b4:8e:73:a3:
                    f1:ac:78:a8:3a:ee:f7:50:4c:e0:04:15:d1:30:8e:
                    a1:99:3c:43:8c:f9:40:30:3d:ef:67:38:d0:cc:b4:
                    c4:d5:ff:38:be:17:7e:ef:8a:23:f2:68:98:b0:0d:
                    32:f8:88:9b:a3:5c:e1:44:bc:b5:3d:f4:42:c3:d5:
                    6d:d0:7b:78:9a:fa:51:7c:90:e0:b1:b7:bd:b5:1a:
                    29:3d:a0:eb:65:45:2b:ed:79:8b:d6:6a:11:c6:fb:
                    0b:05:85:f6:51:5b:18:39:0a:22:f0:b8:84:44:99:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:A1:4E:05:29:93:80:EF:70:C4:2D:6A:7B:0E:13:A8:DB:E2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c97910cc-243c-32df-8616-c22e1a078349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:4e:13:e0:42:be:32:f3:67:7f:f1:f6:7c:e0:06:7f:23:f8:
         14:e6:5b:b6:6c:57:45:01:06:45:a4:80:da:7b:c9:ff:3e:a3:
         68:c3:ab:5b:54:72:95:67:4a:5f:05:8b:6b:e4:c6:28:da:73:
         0e:a0:a1:53:c8:82:13:c3:f6:7c:01:78:ff:7e:1b:34:0e:87:
         97:98:a7:6d:e2:46:08:1b:80:b7:ea:51:81:db:d7:91:be:8b:
         0a:c9:5e:5b:56:98:e3:2e:0a:4b:5b:da:e7:39:7f:bc:d0:60:
         d9:7d:f7:33:94:91:c9:8e:3c:59:75:9b:8c:dc:70:8a:1f:43:
         97:7d:7b:8d:5d:42:6f:89:0b:ee:45:56:cc:34:bf:28:e6:29:
         76:98:7b:67:6d:a9:0e:58:59:54:71:a7:41:99:d4:da:db:0b:
         8f:47:0d:46:c6:a0:da:07:5a:df:61:ef:86:d5:31:44:5a:cc:
         1f:e0:39:92:60:ba:6f:aa:99:e0:e9:e2:55:a0:1f:d7:61:3d:
         dc:7a:1d:29:d6:5a:1d:19:17:ba:6b:ee:aa:7e:f8:c0:45:b2:
         4e:db:d6:59:2e:38:9b:31:cf:c3:2a:03:b6:c2:58:5c:a7:14:
         25:ed:12:20:76:72:fa:74:e2:3a:54:40:af:18:a8:14:64:fb:
         16:bb:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:48 2024 by rpki-client on console-fra.rpki-client.org