Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa
File:                     fa274737-772a-321f-98b8-948a660441cf.roa (raw, json)
Hash identifier:          i3kLMP/qsrCNqn/geG5Jny/P6UOCEjlvHBi6zuoCaHY=
Subject key identifier:   8A:F9:A2:97:69:51:6F:2A:02:5A:5B:97:9F:97:AA:C8:54:6E:3C:A1
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584503C0141F3D463AF5DE89C7B0
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     62633
IP address blocks:        207.231.110.0/24 maxlen: 24
                          207.231.111.0/24 maxlen: 24
                          2606:cc0:200::/40 maxlen: 40
                          2606:cc0:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:14:1f:3d:46:3a:f5:de:89:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=a85cf09f-64c0-4a52-b13a-0c3dad2628ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:5c:f4:04:82:f0:b1:6e:b2:3e:fe:e6:b8:
                    4c:49:f9:61:a9:8a:06:55:31:96:88:b1:61:1d:d0:
                    6d:4f:74:b1:04:90:1e:f0:95:b8:9d:e7:a7:5a:b0:
                    f1:21:89:28:e3:cf:fb:f4:d9:98:6a:da:7a:d7:1f:
                    44:2f:04:e0:1c:02:44:e5:c3:12:50:08:b5:92:73:
                    a7:49:c3:dd:55:7a:ae:b3:4b:84:03:3a:aa:74:f0:
                    fa:e1:b2:cc:d6:c1:9e:71:a2:ba:1e:68:ad:a8:67:
                    24:6f:c3:7b:af:e0:b3:31:dd:b8:0c:b4:97:71:0a:
                    bf:2c:a4:6a:6d:bf:ab:d2:27:9d:9d:a6:02:3c:b9:
                    23:66:4a:b3:25:35:21:ef:af:57:6c:65:53:3f:72:
                    a7:41:9e:5a:10:a3:72:6e:75:3b:30:2a:6f:08:e8:
                    44:a0:d2:7c:cb:38:42:94:ac:68:91:aa:ea:f8:8c:
                    12:10:90:4c:ec:bf:7d:4b:f6:23:86:f0:78:92:c9:
                    eb:2a:18:80:1a:4f:03:1b:79:25:61:5d:bd:eb:d6:
                    00:e3:77:ab:ca:16:51:05:23:ac:8e:31:9f:97:e3:
                    ca:2d:53:83:1c:d1:39:52:d6:3a:24:8b:44:69:02:
                    2c:2d:90:c1:04:8c:d3:9b:44:55:16:6d:f3:0e:e0:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:A2:97:69:51:6F:2A:02:5A:5B:97:9F:97:AA:C8:54:6E:3C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.110.0/23
                IPv6:
                  2606:cc0:200::/40
                  2606:cc0:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:af:74:78:81:5b:8a:e0:ef:57:fd:83:98:36:fd:5a:96:
         bf:ef:9b:f9:4a:87:26:ff:8e:ce:2d:25:15:e1:ad:6d:70:2e:
         66:ce:c2:80:dc:5d:68:17:b3:5a:25:b3:fb:ac:a0:93:ab:c4:
         0c:9a:60:63:73:05:35:c5:a1:75:e5:09:9c:7e:f5:46:d0:50:
         b6:2c:49:ef:d6:b9:8e:e8:61:39:e3:8e:82:54:d6:fd:99:3b:
         0d:26:37:6f:ee:f8:1f:65:85:4b:24:03:ff:64:95:da:02:3e:
         4e:4c:09:54:04:83:48:c1:52:fd:bb:7d:9a:44:51:56:cd:08:
         12:f7:3a:25:0f:8b:12:ca:09:23:8c:d8:86:28:85:f3:e3:0a:
         39:bb:20:ea:30:cf:06:bd:95:08:d5:a8:4c:a9:9a:5f:fe:b4:
         40:2b:f8:22:b2:d1:ea:e2:a7:37:d1:c4:b9:99:2d:92:5a:aa:
         40:43:30:e8:52:45:e3:3a:12:2d:08:d9:d3:dd:23:2f:9f:6e:
         dd:8e:7c:e3:5e:40:1f:01:89:83:fd:c8:03:8f:04:73:46:9e:
         9f:71:73:6c:29:13:82:cd:73:74:e8:83:d3:22:ba:ed:7e:fa:
         df:c0:34:d5:56:dc:75:1f:99:83:ca:6e:f0:c9:0f:9d:c3:ff:
         e8:fd:41:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 15 16:06:13 2024 by rpki-client on console-ams.rpki-client.org