Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa
File:                     60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa (raw, json)
Hash identifier:          2qVaEZEnj23xJbzd8T1hZ/9qgNJuUP+HvNR9TJhKsQQ=
Subject key identifier:   F0:9B:35:BF:8A:13:BE:69:57:C1:11:11:6F:00:53:2B:52:4E:99:E6
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F43285845DEC942C36B00030F91F72200
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     14299
IP address blocks:        207.135.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:42:c3:6b:00:03:0f:91:f7:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=58e867ff-3de3-4933-b332-dda73eda8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:3c:47:af:e8:16:83:b9:f9:87:34:ac:d3:
                    85:3f:93:83:21:ee:a3:20:70:38:1f:f2:1b:01:f4:
                    1a:19:ca:83:9c:31:51:6f:50:58:a8:70:8f:f7:73:
                    8e:c6:3f:29:04:0c:13:08:41:b9:86:de:56:93:fd:
                    7e:04:58:9e:6d:f3:b4:31:5e:b4:15:89:da:10:9c:
                    24:b5:a0:89:19:aa:63:ac:27:2b:5b:77:50:fd:3e:
                    4a:fa:75:09:2b:d7:76:63:ff:7e:c4:46:75:b5:9c:
                    d0:10:77:a0:03:6e:19:d7:6c:e8:3a:fb:9f:70:85:
                    74:85:19:65:e8:db:2c:3e:6c:4f:7a:02:2f:70:f9:
                    f8:54:59:f8:33:cb:03:a6:18:66:06:b6:00:80:06:
                    2d:d1:6a:52:4d:13:0b:cb:b3:a0:55:56:61:ee:cb:
                    05:b6:3f:b4:4d:5b:06:88:85:f2:21:78:1a:7a:a4:
                    e6:1e:99:ba:8a:61:4d:74:33:5b:18:35:4a:44:39:
                    2a:e4:a1:a1:81:f8:70:fb:67:38:a9:99:18:ac:ff:
                    4c:10:96:81:30:19:4e:12:e6:1d:69:25:63:cb:33:
                    22:c2:d7:aa:09:4c:86:c5:f9:8c:0a:73:78:23:fd:
                    aa:9f:37:1c:0a:b3:d0:03:79:cf:6c:ae:82:f8:09:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:35:BF:8A:13:BE:69:57:C1:11:11:6F:00:53:2B:52:4E:99:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/60ac8036-8fed-3caa-bd30-7d9eb7de9f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a8:f7:82:d1:59:e8:46:82:0d:fe:be:ae:df:8b:29:31:1d:
         a2:24:83:9c:e9:61:0e:8c:4a:fa:50:a5:b0:92:df:08:17:de:
         f9:b0:5a:fd:30:2a:78:62:9d:0c:03:f9:aa:ce:6e:5c:35:2e:
         ad:90:09:6c:9f:ad:c7:0a:14:34:9d:ee:66:da:25:e7:0b:73:
         60:9c:c4:af:67:34:54:8a:88:70:d6:89:d5:70:50:d4:d6:08:
         7a:b0:51:d8:04:7d:14:31:d9:a9:84:91:51:6d:10:bb:ea:3f:
         31:5d:43:28:b8:82:4d:e9:a4:b9:34:09:9c:16:e8:8b:a3:52:
         6a:55:01:f9:cc:86:5d:38:64:e4:16:7b:a2:78:52:fb:18:52:
         54:de:78:f6:37:3b:25:13:7d:d5:a6:10:84:28:32:0b:af:3a:
         27:5e:f6:44:9a:54:ca:5f:8b:e8:c0:77:b5:a9:11:8c:c4:41:
         28:64:b4:e7:01:33:45:22:65:b7:54:16:02:96:52:da:b5:1c:
         54:3b:5f:98:6c:0e:ee:89:11:30:a8:17:47:b9:11:41:5f:24:
         31:db:ca:f0:2d:b8:9d:15:2f:4a:e6:4d:85:37:db:3c:b8:da:
         89:36:75:cb:6f:a4:d8:7f:3b:3b:44:f4:3c:95:0b:86:85:7c:
         c5:30:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:24 2024 by rpki-client on console-ams.rpki-client.org