Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de9102e7-5997-317b-b1e6-ac70e63c1395.roa
File:                     de9102e7-5997-317b-b1e6-ac70e63c1395.roa (raw, json)
Hash identifier:          atHD6Yz/fBsFYzCaUNdvNSk+jJjMgeFO44FU1yzUwGE=
Subject key identifier:   C2:6E:54:63:8C:C7:ED:57:20:3F:2C:4C:23:24:7B:79:29:09:3F:6F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F05FC998B13675235B02B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de9102e7-5997-317b-b1e6-ac70e63c1395.roa
Signing time:             Fri 29 Mar 2024 18:39:56 +0000
ROA not before:           Fri 29 Mar 2024 18:39:56 +0000
ROA not after:            Thu 27 Jun 2024 18:39:56 +0000
asID:                     396982
IP address blocks:        107.167.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:fc:99:8b:13:67:52:35:b0:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:39:56 2024 GMT
            Not After : Jun 27 18:39:56 2024 GMT
        Subject: CN=8f958722-105a-408f-8094-2b1d6386b445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:23:e9:69:c2:1e:bb:6a:21:df:0b:c0:f2:
                    c6:73:39:d5:bc:20:a1:e6:19:c0:c2:8d:a3:0e:f1:
                    5e:f2:67:78:8b:64:d6:ce:49:1b:b4:d5:5c:87:0c:
                    0d:d3:e8:3c:9a:eb:4d:52:dd:a4:a9:e4:b5:06:95:
                    c9:b6:86:a1:4d:d0:f9:c3:71:d4:7a:bf:7a:5e:cc:
                    6f:51:0b:17:f7:7d:d3:2d:fe:6f:98:e3:77:fc:e9:
                    fc:25:a4:ba:5e:5c:79:a0:a9:c4:c6:61:f7:68:6e:
                    25:72:91:7d:0f:e8:d9:55:55:46:af:99:b1:97:96:
                    80:ce:b3:ef:60:8f:d7:9d:66:1b:de:e8:6b:ad:af:
                    66:60:ee:6e:6b:c0:9c:3f:57:4f:49:fd:d0:01:1a:
                    76:80:fb:9b:13:94:e8:d2:64:e9:bb:f5:aa:de:2c:
                    81:29:59:1e:97:c9:c7:45:17:6a:71:39:08:b2:3e:
                    a1:4d:44:7c:7b:61:ec:c8:b8:92:91:15:96:53:cf:
                    cf:43:e9:97:52:e5:7b:c1:07:a7:3c:50:d1:94:cc:
                    89:b4:f8:83:49:f7:48:35:d2:67:d3:e9:69:80:65:
                    56:5f:88:ae:67:17:c5:7c:c0:54:64:d2:aa:3d:16:
                    75:bf:40:6c:7e:b2:6d:a3:89:25:69:c9:9b:da:d8:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6E:54:63:8C:C7:ED:57:20:3F:2C:4C:23:24:7B:79:29:09:3F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de9102e7-5997-317b-b1e6-ac70e63c1395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a2:bc:91:01:ea:2c:02:a6:88:05:1a:ff:93:32:eb:a2:6c:
         4b:ea:3f:35:d5:3e:f9:5d:1e:25:d3:67:3e:e3:22:78:7a:a4:
         db:9a:4d:38:19:10:40:b3:f2:d7:62:86:2e:14:d0:76:7d:a8:
         60:aa:73:2e:42:74:27:f5:83:23:77:08:b6:1d:ef:c2:77:5e:
         fe:3e:e3:1e:27:95:31:ac:7c:dc:ea:f0:91:9a:0e:63:25:6c:
         c4:f2:8e:ef:b9:10:12:ee:fd:de:6f:f4:7e:75:2b:9c:0f:9c:
         6d:ed:59:4b:36:24:57:8e:9e:23:a3:63:6e:2b:03:2f:94:75:
         e4:99:8e:88:0b:33:0d:bd:66:99:0a:88:de:f7:a2:62:60:1e:
         22:8e:ee:e0:6c:df:b8:e3:55:8a:6d:e1:6b:98:17:c6:47:fb:
         a2:a4:d8:81:6f:45:30:f2:f3:29:63:2d:6e:92:f6:48:d1:a3:
         63:88:d2:02:89:26:85:d0:f8:02:b0:c8:8a:fe:57:8b:30:74:
         60:9e:ce:84:1d:24:0c:11:20:d8:77:e9:27:97:51:15:36:65:
         54:14:94:3c:82:ce:2b:64:e2:b2:b9:d9:11:1c:a5:90:34:72:
         a6:73:22:08:09:b9:a9:3e:82:16:8b:4c:9e:c3:00:2c:98:72:
         79:dc:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:50:14 2024 by rpki-client on console-ams.rpki-client.org