Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
File:                     9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json)
Hash identifier:          D++ik1GLWHFhvlqW4hq10kXLuOuizitLMWHfZ0D+P9o=
Subject key identifier:   37:EA:24:BF:7F:9A:CE:45:CE:41:21:76:4C:EF:F8:80:4E:82:39:70
Certificate issuer:       /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
Certificate serial:       010D0C9F43285845E193CD1F773FB76D80E70800
Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     63351
IP address blocks:        207.90.254.0/23 maxlen: 24
                          2606:3180::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:1f:77:3f:b7:6d:80:e7:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=0ee92bda-8ae4-4307-a373-e57d5af30986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:65:f2:fe:6e:ad:92:6e:bf:27:07:0d:29:
                    24:0c:41:60:16:e3:c0:a5:2d:f5:ea:37:bb:f6:ed:
                    ad:99:0b:37:1f:7d:68:9c:b6:f2:c0:d8:18:08:38:
                    7b:7c:d7:f0:f2:f0:31:b5:45:ee:23:71:ab:dc:1f:
                    f4:2a:f5:2f:49:d7:03:44:af:cd:77:ea:b3:26:09:
                    cd:3c:97:34:80:b9:3a:2b:7d:8b:3c:96:1b:04:d5:
                    75:5a:33:57:fd:f3:25:db:8d:fe:05:d3:5d:33:00:
                    65:29:3a:2e:9e:68:24:eb:78:e3:ba:bf:ca:9e:c7:
                    29:79:9c:a6:cf:c6:e0:0a:9f:d5:12:7b:90:81:b2:
                    1a:dc:5b:56:98:f4:88:40:cf:e5:41:99:7d:26:70:
                    b3:c9:4c:4a:e1:8c:ab:d6:f5:35:82:4c:6c:cc:8e:
                    18:8b:51:49:63:a2:3b:40:4b:cd:93:79:ef:27:a8:
                    ba:1e:f0:91:07:eb:ca:39:20:9f:d0:5e:db:e3:b6:
                    3d:57:30:d3:14:52:0a:f4:ab:3a:8c:8a:ff:f6:19:
                    2d:ef:b7:0b:c3:1b:91:25:dc:a5:71:79:ec:08:d1:
                    aa:92:d6:a0:e9:6b:08:f0:d6:3e:30:ce:2c:0e:0e:
                    61:e9:57:1b:a7:33:22:7a:de:a5:b0:7f:2b:07:4e:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EA:24:BF:7F:9A:CE:45:CE:41:21:76:4C:EF:F8:80:4E:82:39:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl

            X509v3 Authority Key Identifier:
                keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.254.0/23
                IPv6:
                  2606:3180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:10:ba:3d:da:1d:7b:42:ba:9d:4b:08:dd:00:77:b7:46:
         d7:0a:a4:b6:ed:bb:86:3e:0d:fa:ad:96:87:5b:e0:ae:a8:84:
         d5:e8:97:b6:25:9b:64:7a:38:17:06:36:e1:b9:ff:b3:16:10:
         12:7c:66:68:e8:0c:ea:37:d7:f8:56:ae:23:4a:cd:a7:17:9d:
         b9:9c:d9:18:f4:52:bd:26:c5:66:ab:22:06:9c:f6:c2:d8:e5:
         29:94:e9:87:6c:5b:53:a7:4d:12:f2:b5:cf:75:09:fd:53:b1:
         86:11:d7:7c:9e:80:2d:45:56:b8:f1:b9:ed:09:5c:69:0e:ed:
         58:93:c2:26:64:f3:c5:08:0c:a8:20:4b:8a:f2:4f:ca:71:84:
         80:90:6f:ab:04:19:57:b5:4b:e1:cc:d7:7d:17:21:76:88:bf:
         45:11:52:a7:53:8f:34:e3:f6:dc:3b:15:e4:27:d3:5f:f2:58:
         c5:23:f9:9b:9b:16:75:e3:1f:12:9d:7b:35:c8:1d:3d:a0:16:
         6d:89:fd:b9:c9:b4:ce:b0:55:42:28:10:05:8e:fb:11:85:d6:
         83:4b:b8:9f:1f:f7:a9:35:26:0e:3a:92:1a:e2:c3:37:7c:a2:
         b9:a0:59:8a:29:25:f1:e7:d6:71:3a:4b:d9:34:eb:37:1e:37:
         d5:cf:58:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org