Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa
File:                     d61d4995-a2ee-3c32-8651-31152a3cad87.roa (raw, json)
Hash identifier:          9cpmxWAl8WMpnr1GM548xIYwtuZpXvvPSFVayNY/D4s=
Subject key identifier:   AE:5A:BC:C5:01:35:9D:3C:2B:BA:8C:6F:8E:44:05:EE:25:81:70:B5
Certificate issuer:       /CN=47a49b6d-2825-4496-8656-b42ba516140a
Certificate serial:       010D0C9F432858451A158E5833F4DC3AD0FE9B00
Authority key identifier: 08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     3257
IP address blocks:        107.182.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8e:58:33:f4:dc:3a:d0:fe:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a49b6d-2825-4496-8656-b42ba516140a
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=e690a964-01be-4f4f-b2da-6823628339ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:cb:17:5f:e2:6b:f2:4f:ad:8f:57:5c:65:
                    77:32:93:b7:79:99:39:2d:5b:e7:6d:eb:cd:07:84:
                    3c:9b:7d:93:68:53:94:b6:ae:58:7b:d5:59:48:6c:
                    97:a0:2f:66:ee:80:92:41:94:76:8d:9a:d9:61:e7:
                    4f:4c:d1:67:cb:66:34:76:9b:35:85:5c:c2:ca:a6:
                    b2:ca:1e:42:43:52:ba:be:c7:be:81:97:bf:a0:cc:
                    eb:63:b0:ab:2b:83:c2:67:37:c4:6f:08:3e:71:3e:
                    a1:68:ea:43:67:7b:57:82:e5:91:db:18:57:e7:31:
                    c6:9b:c8:4a:00:d9:46:4c:d1:05:76:0d:6f:5b:88:
                    3b:38:4b:ac:ee:3f:69:14:85:7a:6b:ea:ff:61:ec:
                    c5:75:8a:1c:d5:48:57:e8:50:08:af:1b:de:3a:c6:
                    e2:a2:4f:c7:02:4a:84:0c:43:0f:7b:ae:b4:30:dd:
                    d7:04:1f:59:8a:e1:4f:ec:9d:79:16:a6:d8:91:64:
                    eb:7c:3e:7e:49:0c:50:65:4f:93:4e:af:36:cf:2d:
                    70:8c:3f:c1:70:b2:00:85:aa:7c:39:58:fc:47:b6:
                    6d:a6:9a:01:38:21:bf:c2:a2:f8:0a:9c:42:94:7c:
                    b0:ec:2d:24:05:c1:6f:0d:2d:80:41:6f:88:bd:48:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5A:BC:C5:01:35:9D:3C:2B:BA:8C:6F:8E:44:05:EE:25:81:70:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl

            X509v3 Authority Key Identifier:
                keyid:08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:17:04:18:bf:4d:b6:22:d6:39:fd:41:8f:9a:4f:c2:6b:d7:
         f9:3c:ba:66:ba:71:77:94:fe:5d:0e:df:d0:4d:6f:fb:f5:8e:
         d1:7c:04:71:36:1b:b3:03:c2:08:cc:44:d2:6c:dd:9c:42:22:
         1b:2a:01:a4:0b:e8:d9:9d:ca:9a:44:89:5f:9d:e5:55:5f:88:
         ce:68:fb:e2:d2:bd:0c:8c:22:e0:62:d5:01:98:1e:17:7a:82:
         bb:cb:99:4f:c1:4a:0e:40:69:b5:ae:cc:2c:cd:cd:ff:eb:68:
         2a:48:79:9d:20:df:31:9c:c4:8b:e8:da:7b:8b:fd:68:ad:de:
         a7:ca:05:d2:5f:89:c7:39:8b:63:e4:07:42:51:d5:62:60:f6:
         0c:98:95:01:87:e7:54:91:cb:70:62:8e:dd:0f:f2:ba:c2:1c:
         7a:94:b4:60:aa:21:9a:14:2b:a4:6a:21:04:5a:63:cd:8e:63:
         f2:4e:10:bf:62:71:a8:38:d8:84:7a:37:9e:bc:08:d3:82:e2:
         7d:cf:53:40:96:8d:d2:54:d5:ec:42:bc:dd:85:96:f7:ce:88:
         65:0f:2a:b8:53:4f:66:32:49:cd:05:2d:0a:4b:85:95:3f:62:
         e4:29:7e:db:0e:c7:c2:f3:a1:ff:64:e9:33:61:72:18:46:ad:
         cc:1e:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:35 2024 by rpki-client on console-ams.rpki-client.org