Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5a5a50dd-2bdb-3d74-a02e-605fa6c50ed1.roa
File:                     5a5a50dd-2bdb-3d74-a02e-605fa6c50ed1.roa (raw, json)
Hash identifier:          1UuE3z9gfqEDvul6fZCxpzlwdeQLpYTDztIEo6xN3YQ=
Subject key identifier:   40:D8:27:9F:8F:1D:88:01:14:0C:1B:8E:9A:32:35:B9:F9:F3:21:9B
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285844D44A764A6C2AE1629F639560
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5a5a50dd-2bdb-3d74-a02e-605fa6c50ed1.roa
Signing time:             Fri 09 Feb 2024 02:00:25 +0000
ROA not before:           Fri 09 Feb 2024 02:00:25 +0000
ROA not after:            Thu 09 May 2024 01:00:25 +0000
asID:                     36351
IP address blocks:        209.95.62.0/24 maxlen: 24
                          209.95.63.0/24 maxlen: 24
                          209.95.57.0/24 maxlen: 24
                          209.95.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d4:4a:76:4a:6c:2a:e1:62:9f:63:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb  9 02:00:25 2024 GMT
            Not After : May  9 01:00:25 2024 GMT
        Subject: CN=5bc6b4b6-a295-439d-b40c-7df690982ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:59:f0:b1:03:5a:da:a5:84:c0:46:18:57:
                    89:59:75:5f:ff:99:28:c7:ba:cb:c9:c2:15:f5:89:
                    bc:70:f0:2c:f9:3b:11:fa:17:ed:9a:f9:81:01:e2:
                    ed:30:bd:35:8f:64:25:a0:93:35:ca:83:07:d6:58:
                    06:15:5a:62:5c:4d:1a:cd:b3:df:dd:eb:f2:02:f4:
                    f6:f5:eb:c7:95:45:02:ef:25:49:a7:5d:58:77:88:
                    69:1c:85:44:02:a1:2b:f5:43:b8:31:b8:3f:bb:f5:
                    db:09:6c:57:a4:c4:33:36:a3:b7:30:92:7b:49:6f:
                    d4:38:47:d4:4b:71:26:f5:a5:b1:7f:57:fc:97:0b:
                    cd:09:78:79:7a:b4:35:cd:9a:14:ed:7f:1a:06:f6:
                    77:38:96:f0:43:50:0f:76:20:7b:87:e2:3a:49:3a:
                    bf:72:2d:c5:b9:04:05:67:ad:51:ff:9d:48:17:7f:
                    c8:8d:9b:52:38:28:1c:04:e4:e4:bf:4a:65:a4:71:
                    af:de:dd:46:a0:4d:eb:bd:22:5a:71:26:d2:09:79:
                    35:d8:f9:b2:c3:1f:0e:56:58:47:34:85:ab:ad:31:
                    2c:52:36:3c:b9:f4:4b:a4:da:44:5d:a7:b8:a6:20:
                    15:67:e2:12:da:13:0c:e6:93:10:92:b3:00:a1:f6:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D8:27:9F:8F:1D:88:01:14:0C:1B:8E:9A:32:35:B9:F9:F3:21:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5a5a50dd-2bdb-3d74-a02e-605fa6c50ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.95.57.0/24
                  209.95.60.0/24
                  209.95.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:27:40:f8:6f:3f:41:0f:15:34:3d:92:c7:2d:8b:f0:a7:
         4e:3a:16:26:ba:e8:22:04:60:34:6b:63:68:09:16:16:34:a9:
         b7:97:cf:9a:f1:b7:5a:52:71:02:e0:7d:7c:73:ef:aa:6b:9c:
         86:c9:5c:da:8a:f5:e2:13:b2:70:e7:af:68:f7:e6:9b:c5:d4:
         b8:d5:a9:69:f6:d1:10:a2:e6:24:70:58:5a:0e:c1:f6:be:f0:
         f6:28:cd:76:e2:33:31:5d:c3:c6:d5:19:72:99:83:ec:38:e4:
         50:5c:30:69:f5:3f:8f:c3:14:7a:bd:ff:e5:0a:51:4f:32:74:
         81:e4:f6:84:b5:14:6e:cd:05:9f:9e:e4:80:70:54:79:f3:a5:
         ad:05:04:be:12:ac:ef:18:38:6c:7d:45:f9:c5:52:2c:0c:6c:
         87:0a:55:7b:49:31:4b:5d:e3:7e:94:14:1b:31:4c:9d:b7:56:
         dd:b6:a0:b9:4b:99:84:17:a4:89:98:5f:fe:2f:5c:9f:2a:79:
         22:b2:6f:a9:8a:bb:bf:2c:8a:44:87:4c:36:6d:51:2d:9d:84:
         f7:ea:98:b1:c5:88:78:8f:ce:50:03:97:ad:a3:67:48:f9:44:
         fd:da:d7:7f:d9:2b:0c:ab:58:d3:fb:cf:f2:2a:83:d0:c5:8c:
         67:45:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:54 2024 by rpki-client on console-ams.rpki-client.org