Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
File:                     b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa (raw, json)
Hash identifier:          GdiwH5viJkTy/5Pg0Bgm4LzwKrKJvsjx6VYB7ifCsY0=
Subject key identifier:   C1:E5:EC:86:2D:9E:9A:C0:EB:83:B3:B8:E3:9A:C9:DA:96:B6:AE:0D
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845B21E2D11F7BC4833497F3B00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        207.230.125.0/24 maxlen: 24
                          207.230.126.0/24 maxlen: 24
                          207.230.112.0/24 maxlen: 24
                          207.230.118.0/23 maxlen: 23
                          207.230.124.0/24 maxlen: 24
                          207.230.113.0/24 maxlen: 24
                          207.230.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2d:11:f7:bc:48:33:49:7f:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=799f962f-e325-4b97-97dd-cc2a8a17c8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:31:9c:81:e4:c3:14:b1:11:a7:62:be:1e:
                    0e:c0:ee:af:34:9f:2b:bf:92:aa:50:4a:d6:b4:0d:
                    44:c3:4d:0c:c4:2d:85:34:43:b6:49:d1:b0:66:62:
                    cb:22:c3:73:5b:c3:ce:5f:3a:e5:a6:15:eb:0e:64:
                    c7:9d:92:63:31:3b:b8:f9:03:44:a4:24:6b:aa:72:
                    88:fd:7a:f9:d9:e0:95:9f:d0:00:4e:c2:1d:e3:c1:
                    50:90:d4:51:9e:cf:cb:ec:6a:7a:e7:fa:69:ce:90:
                    9a:51:91:b7:bd:08:fa:be:53:33:99:56:ff:3a:a0:
                    5b:57:99:ef:56:86:73:56:ca:a6:5c:09:6e:9b:3d:
                    19:e7:c7:96:09:8a:41:96:db:da:b2:05:3a:21:a0:
                    74:0b:65:de:43:f5:d0:e7:53:c7:96:45:80:3a:ee:
                    77:56:ee:e7:9f:b8:8e:db:1b:ca:da:4b:b2:37:f4:
                    31:64:a8:f3:80:f5:ac:59:82:d9:ff:3b:9c:29:04:
                    13:81:1e:50:72:60:89:37:13:b2:b7:a0:80:fb:f2:
                    4c:95:5a:5a:c0:75:80:8b:bd:51:0e:46:b2:c1:3e:
                    e1:0b:1e:45:33:82:b2:99:d3:87:4f:c9:52:59:10:
                    ce:db:8e:0d:86:f6:d4:f4:47:5f:4e:1a:d8:0f:ce:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:EC:86:2D:9E:9A:C0:EB:83:B3:B8:E3:9A:C9:DA:96:B6:AE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.112.0/23
                  207.230.117.0-207.230.119.255
                  207.230.124.0-207.230.126.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:2e:59:19:d5:50:a6:b4:9d:8f:7e:a1:dd:92:7d:71:bd:
         43:0f:8e:7f:fe:7a:fc:15:e0:3a:fa:f3:bf:0e:3b:a4:4c:c9:
         87:1f:40:cb:38:f0:34:69:db:a4:ba:8a:a6:0e:41:6c:5f:e6:
         79:3b:03:69:1b:f8:31:18:96:67:ef:ea:b3:af:de:4b:81:aa:
         d1:ad:3f:ee:9e:29:db:5b:39:5c:36:0b:94:2d:97:cd:8f:6c:
         93:c5:ca:10:9f:d6:06:c0:9c:26:2b:c0:d2:31:5e:c4:0a:e3:
         a1:be:b2:69:ea:0e:84:e5:1f:18:39:69:74:93:03:74:b7:96:
         50:69:33:ba:8c:cb:86:05:0e:92:a1:4e:d0:77:16:19:55:ae:
         9e:ec:f7:40:67:49:09:ca:35:1a:58:e3:15:1e:26:f2:ab:ad:
         74:14:73:86:da:b3:f9:5e:04:52:e9:8d:83:a9:d9:3b:77:e9:
         1c:6c:53:5b:b0:02:88:8d:30:56:17:0e:0b:fc:2d:c9:a6:1f:
         29:5b:85:6d:71:19:34:b7:c9:ae:c5:47:83:cf:ff:7c:db:dc:
         a3:78:9b:dd:50:4d:8c:82:1e:e6:75:02:55:3e:0f:46:f9:75:
         08:57:4e:69:f3:65:c4:94:95:52:a7:ad:fc:00:6b:07:af:15:
         87:95:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:11:12 2024 by rpki-client on console-ams.rpki-client.org