Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa
File:                     a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa (raw, json)
Hash identifier:          L+eRvON2MGmflvW7SMbZNg1EgoF+hbr+5tNhxaDKzUE=
Subject key identifier:   B6:6E:75:69:28:73:CA:68:4D:BE:75:E1:22:7A:26:CA:EC:8F:E4:6A
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858464D0F09C2B026EB35855DD1F0
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     3807
IP address blocks:        207.196.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:09:c2:b0:26:eb:35:85:5d:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=c2596d1e-6002-4c70-83f0-3f34c0d349ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:c6:92:d2:4d:64:5a:f6:54:6f:68:b1:ab:
                    e5:7a:e5:39:60:f5:68:f8:5f:89:95:6a:2c:81:b3:
                    d2:90:dc:81:61:77:d9:d3:50:e8:b2:5e:51:6d:fd:
                    f7:d7:43:89:80:1c:ad:55:43:34:83:1b:1c:3d:f4:
                    6e:79:11:85:ee:b6:dc:78:4c:9e:1e:36:c2:9d:7a:
                    f0:13:87:02:e2:6c:47:ce:19:d1:41:c8:ec:ad:91:
                    e9:18:06:da:4b:a1:7f:38:93:c4:d8:ef:a2:b2:db:
                    a2:3a:bd:23:e7:08:37:67:a2:2d:3d:54:a3:7a:96:
                    c3:65:4f:98:e9:52:f8:02:63:a5:35:63:b4:73:61:
                    05:49:06:6d:e9:62:c2:cf:aa:7a:fd:79:f2:a7:58:
                    9e:01:58:ee:c0:7b:98:6d:f9:5c:e1:eb:56:a3:ea:
                    a7:4b:21:43:14:66:4c:9b:d3:15:58:34:b2:bc:fa:
                    fa:8d:fe:3a:a9:c1:5a:34:76:18:b8:ee:4e:15:03:
                    fe:83:41:b9:b7:66:2a:b0:c4:12:4c:87:9f:ff:e3:
                    a9:0e:08:a9:d7:07:eb:89:7f:00:42:bc:b8:f1:4c:
                    c5:c3:ca:b2:85:fb:2c:dc:72:99:6f:93:04:88:f4:
                    9e:68:c5:a0:fa:17:11:ee:4c:91:0d:b1:9b:4f:fa:
                    7d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:75:69:28:73:CA:68:4D:BE:75:E1:22:7A:26:CA:EC:8F:E4:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:56:28:2f:a5:00:40:fb:06:ca:96:52:83:5c:6f:92:ea:
         d3:61:39:52:78:3f:98:b0:fd:0d:2b:6c:b4:ed:13:25:f2:b8:
         0d:af:5c:a6:9a:df:e9:27:e5:4e:06:08:00:d6:62:a0:87:61:
         af:be:cd:d6:ba:bf:85:ff:d4:fe:c9:13:04:79:b6:a9:57:e9:
         c6:9e:ca:36:ec:15:30:3d:a7:a2:ce:0b:45:7e:5d:fa:08:a9:
         f2:08:e5:51:3b:a3:36:20:54:21:bc:8b:40:cb:6b:d4:6d:1e:
         5e:f1:e5:83:e5:3a:48:1b:e2:c7:9d:a8:cc:fd:c7:22:02:9c:
         b1:e6:c6:a9:85:8e:69:2a:77:fe:fb:5e:91:81:17:fc:7c:e1:
         f1:46:ed:a9:37:60:d3:29:92:9a:77:d3:c2:9b:24:d8:7c:6d:
         99:0e:03:4c:90:a7:ba:b2:02:f7:4d:d9:4d:0d:6c:22:b2:ad:
         bb:1f:74:b0:ad:11:ab:13:92:b8:e6:db:93:94:9c:a4:42:8b:
         cd:f3:7d:62:c3:da:2b:9c:e1:b0:0e:33:8b:94:41:b1:2b:76:
         63:7e:3d:8e:af:a3:69:10:b3:9d:9d:d9:ab:cb:4e:88:72:52:
         91:24:ad:63:89:06:b8:f8:58:25:56:f7:ee:a5:f9:91:62:a6:
         34:29:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:35:04 2024 by rpki-client on console-ams.rpki-client.org