Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa
File:                     7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa (raw, json)
Hash identifier:          +2E+3amkjj7QKQ3kxf9+BViR/EX26pqsUsiMKv0divg=
Subject key identifier:   A7:C4:30:40:42:9D:C9:CE:F9:41:CD:08:CD:75:99:88:5D:7D:80:A6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452EE7E8A0C2D3AA11C3FFC480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     15247
IP address blocks:        209.53.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e8:a0:c2:d3:aa:11:c3:ff:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=9484b95b-32e5-463b-b88d-b885db91d5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:e2:6c:4c:aa:4d:c2:bb:2f:12:68:2d:c5:
                    f3:b9:52:4d:64:b5:bb:39:64:ff:66:69:91:a5:3c:
                    aa:76:2f:31:23:6e:7a:05:23:73:a8:81:6d:23:b8:
                    d8:89:c1:4d:9b:84:ac:e2:2d:5c:cd:a7:dc:58:1c:
                    31:b3:80:ce:60:d0:4e:7a:29:07:24:d2:21:50:5b:
                    29:aa:72:e7:1f:53:fc:92:ea:f6:8a:b3:d5:10:f0:
                    6c:79:62:ba:a9:9c:3f:90:8f:34:fa:78:4c:2c:b3:
                    5c:e4:9c:86:bb:f0:8f:86:44:09:ab:e3:19:3a:5f:
                    55:15:ba:d8:8d:03:e7:a1:6b:c4:fe:78:2a:01:71:
                    bc:ab:c2:50:f3:49:2a:dc:90:b7:7c:f2:e2:12:12:
                    e0:5f:26:00:d4:fd:d8:25:a8:43:f4:ea:3a:f5:c8:
                    c1:3d:ab:c9:4a:74:12:e4:43:4e:9e:4e:de:49:7e:
                    db:44:fc:87:fe:a5:92:d3:23:37:aa:6f:4a:0e:8e:
                    c3:97:22:b5:b4:b8:a8:ef:57:64:ea:96:57:52:b0:
                    d0:1a:23:fa:88:ad:7b:81:ef:37:f2:ff:17:f5:fc:
                    4d:0a:a2:b8:06:65:27:1b:dc:00:ba:e3:aa:40:65:
                    09:49:5e:e2:4b:03:c0:a5:0d:d0:79:96:ab:d3:35:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:30:40:42:9D:C9:CE:F9:41:CD:08:CD:75:99:88:5D:7D:80:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:dd:bd:ca:58:e1:b4:b9:45:73:a8:bb:97:df:35:a5:3a:
         57:47:61:68:36:fd:ee:47:6d:d8:ff:e3:51:54:f4:bc:fd:d8:
         3d:f8:1b:ed:35:85:54:4c:30:12:93:60:ca:0a:40:f4:8a:b4:
         f2:31:71:98:7b:42:c7:e2:e2:e6:38:3a:f9:d0:56:fe:7d:89:
         69:a7:94:fe:07:6b:3e:f0:ba:c4:12:cc:06:39:a1:6f:c0:90:
         78:eb:d0:88:11:f1:fc:7c:a7:03:27:98:b4:86:12:b9:86:bb:
         10:46:f8:ca:07:24:3a:d4:9e:f3:54:f7:f8:41:69:e2:90:ae:
         8b:2c:2a:04:31:1c:d9:b8:77:3a:40:2b:2a:c0:3c:7e:da:38:
         a8:45:6d:dc:8e:21:5b:0b:ea:e1:6a:83:76:21:b1:26:bf:92:
         41:ca:4a:a2:eb:4c:0d:a5:6e:99:d2:fb:a6:cd:f4:f8:96:e4:
         2e:11:88:fd:55:0d:0e:c3:21:75:3d:77:f7:19:56:06:d0:40:
         d5:7b:e9:d3:e3:65:46:9b:d7:b2:95:25:0c:11:c7:6f:1e:dd:
         64:e3:54:41:f7:94:24:03:b0:75:0a:06:d7:20:55:03:78:fe:
         00:6a:56:bf:8d:13:b1:e1:05:4e:4b:65:58:54:a4:ba:ab:71:
         63:8b:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:10:11 2024 by rpki-client on console-fra.rpki-client.org