Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
File:                     31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa (raw, json)
Hash identifier:          LKfxaLH3GI19nli23DvTqIRRCfbjfIk3jhHRo+ZhD3g=
Subject key identifier:   3E:6D:23:A4:08:9C:9F:77:3F:77:45:1D:08:00:40:C1:0B:D0:03:30
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7E8238A20552043715700
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     26722
IP address blocks:        207.54.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e8:23:8a:20:55:20:43:71:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=b0f692a7-7a98-49df-a101-6bd6a6eaeadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:f5:89:79:b6:8e:07:42:3b:ba:a7:1e:16:
                    04:16:74:9a:20:f6:09:5d:d3:70:7e:1f:1c:f7:67:
                    95:1b:cd:b4:bb:2d:81:40:9d:89:a6:0b:f2:b0:bf:
                    6b:7b:2b:ef:2e:39:30:2c:e9:f5:ce:a1:14:05:36:
                    fd:68:da:85:f5:4b:f5:78:a5:2b:45:a9:66:23:b0:
                    a7:09:f6:24:a2:65:64:bf:bf:74:3a:9c:df:66:a1:
                    a5:c4:a8:22:fe:e5:a5:fd:7f:c9:ae:75:9e:22:2c:
                    bb:8a:62:5c:60:2b:35:d8:dd:8a:8b:5e:20:a9:d1:
                    b6:e5:75:51:a6:7c:0e:9e:97:52:47:3f:47:0d:74:
                    a6:11:47:8b:7b:1d:6e:2c:23:0f:68:73:b2:6b:d7:
                    88:cb:f3:21:22:1a:06:7b:5f:5b:52:eb:06:3d:81:
                    df:30:57:52:c1:86:cd:5b:cb:88:62:ad:60:9b:c4:
                    55:86:af:52:4b:b9:80:4e:d8:43:e6:02:aa:ac:86:
                    2a:31:c0:e6:5c:21:98:9b:9b:f3:1a:6d:fb:b8:84:
                    e5:0d:7e:ca:be:25:ac:ae:7c:74:e0:f6:26:80:79:
                    98:f7:51:b9:5e:91:04:ab:dc:82:ed:1e:45:86:7c:
                    b1:7b:5c:86:c6:17:9b:c9:64:b0:87:30:9d:6e:11:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:23:A4:08:9C:9F:77:3F:77:45:1D:08:00:40:C1:0B:D0:03:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:79:ee:07:40:5e:ae:4e:42:03:1e:25:fa:62:c6:be:7b:2b:
         b8:e3:7a:27:ed:70:6e:16:ee:0d:35:e8:59:53:c1:09:ac:ed:
         0f:7b:e2:31:a6:27:96:61:04:40:bf:76:0d:9c:ee:b3:f4:cd:
         28:a4:34:33:0b:e4:eb:c8:71:b4:23:ff:1e:49:b2:54:b4:b4:
         cb:15:fa:b2:be:77:3b:b7:f0:10:da:39:52:c4:c2:4c:54:21:
         bd:1e:4f:9b:d6:cf:0b:50:d7:73:af:ad:a3:e1:67:99:6b:32:
         dc:3c:4b:8d:cc:47:2b:d4:13:78:9e:9e:b0:ef:5f:09:21:e3:
         71:82:fc:c1:81:e1:62:c6:7d:f8:45:90:98:21:89:61:81:0c:
         2b:fb:a2:ca:0a:79:d4:ad:b4:0f:ec:47:94:87:5f:e4:b0:d4:
         50:9a:aa:93:be:79:37:0a:aa:51:c3:21:d9:ef:fe:91:22:85:
         7e:b3:8b:b6:d8:bb:80:29:6f:81:1e:76:1a:96:c5:79:03:4d:
         1f:94:70:fa:ec:1a:5e:5e:f6:70:5a:11:56:20:99:21:b6:94:
         d5:fa:3c:d6:aa:a3:76:29:77:37:a3:14:73:a0:09:27:a3:ed:
         3a:e8:cb:11:f1:0f:56:c2:12:f7:ab:1a:ae:b3:9d:57:b2:f5:
         7a:9c:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org