Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a8df2eb-553d-3560-af7c-0f13324e6120.roa
File:                     9a8df2eb-553d-3560-af7c-0f13324e6120.roa (raw, json)
Hash identifier:          lT0oR0tdcsH2ebVfW+GkuXiJCe9MTjtRMR1R9CN3vp8=
Subject key identifier:   F1:72:24:F9:45:04:38:37:A4:98:C9:9A:1D:D7:18:A6:26:F2:0E:F7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453747FE4397870E7674D12880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a8df2eb-553d-3560-af7c-0f13324e6120.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     852
IP address blocks:        207.81.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:fe:43:97:87:0e:76:74:d1:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=5bd6e147-b0cc-4017-b720-6fb2d34a00c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:6a:a3:e6:fb:31:38:25:31:44:b5:b1:3e:
                    a5:40:e0:57:67:b5:60:3e:e8:8e:72:85:9e:7e:2d:
                    c6:0c:48:7f:ba:5f:f1:8a:4e:73:f4:92:7b:fa:ac:
                    b6:2a:92:4d:7b:51:13:49:40:ff:e2:a0:05:0b:b0:
                    ea:80:61:8d:d5:fa:01:2d:75:ce:8b:5e:71:2a:a6:
                    bc:03:8e:74:4b:8f:67:d6:26:4f:35:69:49:68:8b:
                    38:91:8f:a3:ad:d9:49:1c:1a:83:71:09:4c:88:b2:
                    9c:1b:43:b3:28:f6:47:c7:9c:ab:f0:80:e5:ee:70:
                    82:93:13:42:ed:42:9a:4d:57:00:31:3c:e8:64:d5:
                    29:87:aa:c9:9e:34:bb:27:e8:5c:1b:b0:68:e0:53:
                    b4:37:99:6e:7c:92:9e:d2:84:39:5b:fe:79:1c:5d:
                    5d:ea:fd:26:ca:4c:3a:81:34:be:21:3d:40:98:92:
                    59:fb:39:3e:a0:77:ba:d4:51:52:a9:40:72:4b:f3:
                    03:6a:ed:45:01:e1:ce:81:de:a3:39:2e:83:c5:98:
                    4d:63:13:f4:ae:c9:b3:51:4c:72:c1:ba:17:c6:61:
                    dc:5d:b4:06:e3:5f:fe:6e:39:a7:7d:4a:39:68:cb:
                    e9:3a:5f:40:a4:9a:a9:af:13:a5:21:20:b7:4e:5f:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:24:F9:45:04:38:37:A4:98:C9:9A:1D:D7:18:A6:26:F2:0E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a8df2eb-553d-3560-af7c-0f13324e6120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.81.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:d4:12:b9:54:5e:46:97:4b:1c:c2:98:31:76:0f:c6:6b:e6:
         62:8e:3d:01:59:fe:37:6a:30:8c:52:3e:e6:73:4c:90:c3:4f:
         da:ba:ca:49:bc:41:4e:cd:a6:44:60:b1:d8:d6:e0:f6:ef:2e:
         af:5f:e8:2a:a8:6e:6a:6b:07:d9:d9:ee:27:c6:58:da:09:46:
         90:33:6d:9c:bc:af:df:63:06:ae:f9:98:12:32:4b:54:04:19:
         dc:e5:88:c5:0b:32:a7:db:13:8e:4e:74:9a:b2:72:58:b4:0f:
         50:9f:26:e9:5c:ac:3f:e0:13:4d:1f:33:56:23:6f:cd:dc:4d:
         bd:c2:12:46:ed:9f:2d:25:de:5b:b6:df:f5:1f:af:39:23:10:
         5e:45:75:fa:c0:2c:67:ed:5e:ff:63:31:83:13:a3:dc:30:c9:
         87:12:38:1f:e6:17:09:b8:45:ea:99:28:66:5b:5a:38:59:32:
         81:53:39:fe:d5:4c:a3:2f:d2:8a:49:2b:25:27:20:b9:e9:85:
         a8:9f:0e:42:ef:b9:c3:c9:92:97:d7:91:b2:9f:b1:d7:b1:64:
         04:e3:fb:27:31:8c:a0:2a:77:26:4c:3c:6e:b4:1b:57:d3:c9:
         d8:b1:01:a6:a7:f6:5f:27:79:d6:c3:8f:0e:69:a0:7a:1b:57:
         d5:4c:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:21 2024 by rpki-client on console-ams.rpki-client.org