Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa
File:                     1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa (raw, json)
Hash identifier:          WrTQ7c89tvpZ+8HLgE7WRPKC0Hfxy/m+MR/qkGCHe5Q=
Subject key identifier:   FD:16:35:1A:79:B0:D1:65:2D:2E:5C:B9:DC:B9:C0:A5:2D:C7:2F:70
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F43285845280AF42EC37989F8655F9900
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     14230
IP address blocks:        198.204.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f4:2e:c3:79:89:f8:65:5f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=9f8d089f-6128-4eda-ba38-73903cca57d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:c0:e8:a1:06:30:f6:7f:e8:78:17:71:75:
                    96:ee:0c:33:44:69:0a:e6:d3:25:5e:0d:01:42:4f:
                    41:40:3f:3c:db:e7:0c:9f:63:1a:c1:98:84:e0:f5:
                    c6:3e:30:7d:91:58:33:89:9c:40:cd:f8:bb:79:b6:
                    ab:80:dd:2d:fa:43:b9:fb:60:47:70:74:9d:25:e9:
                    1c:dc:83:6e:e5:8e:2e:78:e0:ff:70:07:cb:96:f0:
                    f3:4f:38:95:c6:3a:ed:4d:05:07:73:36:38:20:2b:
                    8c:48:7d:3b:fe:8c:c6:ee:8a:b5:3a:04:00:36:b5:
                    9d:11:12:0e:ce:ba:4c:04:4d:f5:f0:26:99:01:dc:
                    96:04:24:14:76:29:dc:7e:b4:f7:16:e0:94:ad:7b:
                    c4:fe:d5:60:60:45:c6:de:7a:c1:ea:90:a9:e7:ea:
                    93:96:59:eb:c4:71:16:de:eb:e1:1b:47:68:cf:24:
                    d8:e3:d6:d0:b5:76:74:2d:46:18:2f:ea:4b:7e:06:
                    20:a4:16:82:ad:e6:df:8d:01:a4:7a:47:3e:7c:ba:
                    f9:05:2e:cf:04:13:68:36:bf:61:21:da:14:12:3f:
                    19:07:22:dc:44:94:e7:62:70:f8:3d:03:07:c5:8f:
                    4c:50:a2:80:1a:96:b4:7f:f5:d6:b1:77:b4:1d:03:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:16:35:1A:79:B0:D1:65:2D:2E:5C:B9:DC:B9:C0:A5:2D:C7:2F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:dc:5d:cd:1f:28:be:0a:30:d4:1a:8f:49:cf:53:9e:15:01:
         ee:b2:c0:60:ae:94:49:90:ad:ef:46:08:02:19:7d:ba:1b:74:
         31:c4:2f:0a:be:88:c3:94:7b:1d:a3:f2:92:eb:c9:82:c3:ed:
         63:a3:61:3d:96:6a:69:5d:00:37:dd:5d:af:01:e1:9d:33:00:
         fe:2f:f1:a7:3e:73:bf:7c:36:1f:29:91:8d:f3:db:91:27:ff:
         41:e4:51:bb:2f:2e:09:7e:44:8d:91:d7:38:ac:5d:bb:24:63:
         1d:79:96:d3:05:df:4e:3b:77:b1:52:ce:18:80:9d:e8:b1:89:
         fc:23:96:25:99:63:2f:fe:13:cf:a1:4a:b0:98:61:75:a5:62:
         9e:81:20:81:bd:ac:bb:09:84:b6:5a:1d:b8:32:91:ba:ab:17:
         e6:d9:64:7a:1b:26:4e:48:88:97:22:c0:81:ee:c0:bb:d3:a6:
         36:e0:a1:d1:58:8a:11:f1:8f:e8:33:98:57:dc:94:e6:2c:6c:
         a8:ae:86:fc:cb:3e:ed:12:09:8d:3c:2e:aa:c3:98:5a:68:99:
         27:bf:70:be:fa:46:88:3d:6f:21:3b:7f:cb:42:0a:04:85:02:
         6c:ad:6e:85:72:6b:fb:d0:2a:7e:86:6d:3f:4d:31:59:43:98:
         bf:09:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:34 2024 by rpki-client on console-ams.rpki-client.org