Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa
File:                     dd1f4fa7-af0e-3f85-bf49-27de74094131.roa (raw, json)
Hash identifier:          50QVVt3HE3aQvVNF7PzYxJ/T0sH5GSCEPuT4FDgfP+E=
Subject key identifier:   7F:3B:DA:8A:E5:64:10:F9:4C:D4:E3:53:C3:D2:7C:25:F8:E3:B3:AC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584538AD45A7059AC2C51FBCCF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        209.121.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:45:a7:05:9a:c2:c5:1f:bc:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=aaa46d96-5f8c-43ae-abc5-ad747e988990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:fa:17:20:6e:65:03:fa:f9:ea:de:ed:fb:
                    e4:7b:19:fa:75:4e:27:51:5c:5f:da:1c:ca:63:3b:
                    66:7f:ab:6f:cf:a2:c9:1b:14:44:f0:15:5b:90:9e:
                    9e:c8:71:80:87:3d:fb:99:cf:5f:1d:0d:82:6c:15:
                    16:9b:31:62:06:db:10:72:dd:ff:99:1c:96:38:95:
                    07:e7:94:f9:ec:f1:f7:71:0f:01:6c:04:5a:39:4e:
                    da:08:f8:2b:3f:3d:12:2c:a9:69:1e:91:52:72:36:
                    38:b1:36:4b:4c:76:87:b8:59:b0:f2:b4:0d:28:51:
                    fb:c8:62:17:14:2c:e3:1a:8e:47:2f:16:41:e6:87:
                    34:22:9b:b9:8e:eb:3b:a5:66:11:8a:40:1e:12:31:
                    7b:ee:f0:20:d0:f5:4a:6b:08:8a:8b:03:80:61:aa:
                    a9:78:0c:72:9a:c4:60:a5:b5:54:63:19:38:52:eb:
                    90:c1:6c:cc:15:5b:72:41:c0:61:ec:8f:54:46:3f:
                    a9:ff:7e:40:db:d7:bc:a7:9b:de:68:6c:1c:90:92:
                    0a:9e:ca:e1:d2:3c:b7:d1:23:01:2c:5d:70:1c:c6:
                    d0:fc:3d:61:34:89:e0:0c:86:91:ee:96:b6:32:93:
                    fe:49:db:3c:c5:93:4a:9a:be:41:26:d5:d5:b9:7a:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:DA:8A:E5:64:10:F9:4C:D4:E3:53:C3:D2:7C:25:F8:E3:B3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dd1f4fa7-af0e-3f85-bf49-27de74094131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.121.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:14:66:97:7c:5b:3b:ec:03:0d:c1:6b:5e:66:01:b0:ee:65:
         d2:93:21:01:bf:32:1c:96:d6:71:da:3b:85:9b:b2:83:0a:94:
         f5:81:ea:05:3b:db:49:c0:a0:83:94:9f:e7:81:b3:9f:01:07:
         c5:a5:1e:fb:33:97:72:e8:a5:4a:eb:59:79:87:c6:24:e7:b4:
         fb:e8:33:54:35:c5:41:bf:9d:81:c9:69:61:b0:a3:6a:ff:57:
         26:e2:7c:a3:06:a7:62:57:5c:35:67:28:0c:08:f9:0d:7c:f7:
         29:54:37:1d:df:5e:ea:10:14:c9:9a:47:b9:e3:cf:81:e8:4f:
         95:f8:f7:9e:7e:37:17:bc:d7:0a:a8:c0:f8:18:e9:55:fc:03:
         d1:65:a7:da:ae:92:1b:23:ae:91:4b:3c:b0:fd:4b:51:92:1e:
         b0:7a:ed:90:a8:82:e1:d8:6d:56:ff:dd:b7:52:3e:dd:d3:85:
         98:d7:da:43:18:02:0c:4e:07:f1:06:0c:2b:2f:21:73:75:c1:
         63:37:85:83:1b:2b:8f:90:22:48:cf:8f:2a:04:c9:7a:22:58:
         d4:76:41:cb:e6:d7:22:d3:70:7f:c5:d7:eb:3a:32:af:dc:22:
         98:a0:a7:4a:76:6a:41:30:73:b6:8e:14:ba:8e:51:2c:20:b3:
         fe:02:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org