Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/f16f9ba0-b09d-3168-b173-4652fef00e14.roa
File:                     f16f9ba0-b09d-3168-b173-4652fef00e14.roa (raw, json)
Hash identifier:          g3AH9i2/neecwI2IYFfCvAmo9iF4pbZ3tmhCcsnMsIo=
Subject key identifier:   85:05:54:A6:E9:DD:DD:ED:47:95:BD:14:65:A5:5E:72:4A:04:52:1F
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F432858455CF82D099BA703F1EBC43F00
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/f16f9ba0-b09d-3168-b173-4652fef00e14.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     26411
IP address blocks:        103.207.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2d:09:9b:a7:03:f1:eb:c4:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=3b16adfc-e9b3-4c3c-a3c0-f98e95635e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:fb:d9:a4:f5:0f:67:d4:da:3f:9f:81:aa:
                    92:47:6d:d0:74:56:56:14:5d:22:61:2e:df:8d:f4:
                    9a:b9:11:dc:51:b0:e6:75:b2:86:8e:47:85:f1:8d:
                    d8:ac:8d:b5:00:f6:ba:5d:c9:fb:73:e0:b6:ae:4d:
                    9c:36:80:39:03:b2:a4:5b:0c:fc:e4:ce:4a:cd:f1:
                    db:50:10:67:4a:c7:22:0a:49:7e:bb:e6:db:cc:81:
                    d0:e4:19:d7:6b:62:7e:6b:e6:a3:66:e1:98:ed:3e:
                    8b:01:7f:af:ba:7b:7f:19:70:45:3b:f8:0b:d2:56:
                    fc:54:be:24:45:2a:4f:37:51:c6:f8:f7:7c:67:05:
                    ef:fe:45:28:2a:ec:a3:4d:01:a0:f3:a0:34:da:6e:
                    83:6a:e2:60:e5:d9:c9:e6:be:72:7e:62:bc:e0:7a:
                    d7:3e:57:a3:3b:9e:ea:49:6e:cb:4a:99:62:72:f2:
                    32:f8:bc:71:7c:8b:aa:87:ae:b0:a2:54:3c:8c:e2:
                    47:2f:62:3f:1f:3e:a8:a7:63:1f:e5:2c:8a:29:45:
                    77:b4:8d:55:ec:1a:cf:6b:a2:7a:06:3a:b7:fd:b3:
                    24:75:6c:21:4c:7b:2f:d8:45:06:13:e1:d8:ff:10:
                    fa:87:d8:8a:b2:2f:7b:30:fc:1f:f2:e9:61:91:14:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:54:A6:E9:DD:DD:ED:47:95:BD:14:65:A5:5E:72:4A:04:52:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/f16f9ba0-b09d-3168-b173-4652fef00e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:c7:c3:68:22:e9:eb:9f:c0:d9:f1:67:66:34:b0:48:0f:
         fa:a3:5c:2e:6a:66:f9:39:cc:62:a4:fe:3d:f1:7b:05:cd:56:
         31:0f:e5:33:5d:02:33:ea:43:61:34:6d:8f:13:61:b8:6f:eb:
         74:2c:f3:49:4f:a8:e3:68:ae:8b:4d:24:25:b3:7b:4d:21:cb:
         7f:7f:b9:cd:e9:46:da:3e:00:39:6b:08:8e:b9:ab:8d:09:cc:
         9a:14:4d:13:35:cb:bd:f8:10:0d:73:07:b2:5b:82:56:03:be:
         36:d6:a8:6f:24:37:5e:e6:a5:1f:15:a4:c7:28:9b:d5:24:26:
         0b:d7:10:d9:43:ad:fc:5f:b0:34:b7:a8:9f:c3:5b:9f:ef:89:
         5c:3a:e0:04:c4:ed:dd:b2:88:2e:0f:8a:bd:ef:39:69:9c:32:
         a5:0a:02:eb:bc:4c:ad:96:69:9c:57:0d:8e:fc:eb:0d:11:09:
         3f:db:c7:0d:1c:86:ed:d6:00:e7:d4:db:d2:35:9c:0e:1a:eb:
         17:5b:d7:55:b5:32:81:d2:8c:75:a2:c6:69:1b:01:eb:9a:2e:
         57:da:fd:ab:0f:51:2b:aa:d9:a4:3d:05:85:0c:4e:54:14:09:
         5f:2e:a3:1a:eb:8d:d1:86:e1:62:02:0c:8e:c2:2a:5f:fc:5d:
         65:c3:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:14:37 2024 by rpki-client on console-ams.rpki-client.org