Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
File:                     7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json)
Hash identifier:          VcMl4nPY1LBeYbIRdj2nK1846tjjr3mKrXeXD36AWw0=
Subject key identifier:   63:E5:94:18:77:58:35:84:BB:6F:70:51:D1:1D:C4:35:58:9B:CA:53
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D8287E6898333CEF201F680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     25668
IP address blocks:        209.53.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:87:e6:89:83:33:ce:f2:01:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=bc5e6503-95bf-4c16-a5a1-6f8a594e7fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f1:bd:fd:51:42:c6:53:d6:c9:b3:d9:25:9d:
                    19:ec:23:da:7b:c3:3f:63:1e:6c:44:5a:e8:ab:39:
                    4d:1d:ff:2d:27:da:04:13:a6:69:f5:e9:9e:77:56:
                    79:0b:a6:07:67:92:c4:08:f9:bc:f8:cb:9d:49:3e:
                    88:f9:76:3c:d7:e8:f7:7c:b5:f4:a1:2f:37:7b:b5:
                    8e:27:53:e0:5b:e5:64:af:b7:91:3a:8b:6f:83:73:
                    51:92:e5:78:53:4c:f5:e4:dd:64:a3:3c:8a:ca:36:
                    ca:ac:82:20:2c:f8:06:55:8a:7e:cf:06:43:23:c6:
                    aa:0a:58:39:60:2e:34:11:82:1b:1a:df:59:b8:07:
                    fb:3d:ac:ab:8a:6b:64:b2:fa:bf:a1:62:2b:7e:91:
                    1e:7e:e5:b8:c8:e7:da:b3:15:47:6a:89:2a:2e:ba:
                    0c:5c:77:77:aa:44:8e:67:6d:a1:15:66:90:f8:4c:
                    e4:00:54:00:36:af:1f:54:71:0b:84:15:95:44:27:
                    a6:0d:d3:53:f8:af:61:3f:5a:af:a2:fc:1c:4a:54:
                    e4:85:96:9d:e5:2b:fc:9d:d3:a2:7e:92:b5:2c:73:
                    5d:0e:4e:12:85:6c:44:5e:ed:5f:a4:0d:68:d6:da:
                    75:92:1f:bb:88:ea:4a:58:a0:cb:b7:b0:61:55:62:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E5:94:18:77:58:35:84:BB:6F:70:51:D1:1D:C4:35:58:9B:CA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:08:d8:18:cf:ba:a3:7e:3d:cf:ba:b7:76:51:a4:79:1e:
         6a:4c:1d:da:ee:e1:94:ab:03:04:eb:d6:c8:54:60:8e:20:90:
         10:3b:af:c1:94:26:4e:c6:c0:6c:39:d7:7e:e6:23:8e:d2:2f:
         fe:61:02:6a:ba:35:a4:bd:60:22:87:f3:48:f8:a1:4e:99:a2:
         f5:29:59:6d:63:1a:2e:d9:1a:c8:61:fa:45:f7:79:51:c2:10:
         b9:af:54:76:7b:90:da:58:ce:d5:9e:6b:d4:d9:67:7d:3e:be:
         e8:7a:f0:e9:88:72:57:c9:9e:31:e1:fb:c5:cd:2c:31:39:f6:
         75:b0:09:c0:d8:66:5b:49:09:d7:64:82:48:cd:66:b2:63:57:
         18:b9:ff:b2:38:b9:c4:f7:92:06:20:55:a6:c9:8f:5c:24:07:
         2c:21:c0:13:d1:f0:75:1d:d4:03:ea:10:45:39:61:7d:de:78:
         41:ea:1e:92:3e:05:43:18:8b:2a:00:3b:c1:48:ae:77:cc:fd:
         cc:bc:67:04:e1:fb:83:14:87:fc:9b:3e:16:77:12:c1:d7:58:
         ff:71:ab:3a:10:92:49:cc:c7:1d:40:ae:d3:2a:51:6a:8d:45:
         86:e4:60:bb:55:70:49:62:84:65:39:b9:bd:60:a8:cb:d1:21:
         02:34:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:20 2024 by rpki-client on console-ams.rpki-client.org