Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
File:                     c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa (raw, json)
Hash identifier:          ldLhp6Grsq5taLkw9H1/LkBBvV9ZogDGUIdYlWEnAhI=
Subject key identifier:   D5:15:9E:4F:8D:6E:10:21:7B:02:D4:A2:EE:BB:75:BE:4C:46:95:99
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858464D0F09B0482B5EA3FA9ABA40
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     3807
IP address blocks:        207.196.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:09:b0:48:2b:5e:a3:fa:9a:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=9955e65f-35ee-4add-9877-9b3af35747b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:2c:ce:fb:fe:df:83:3f:1d:22:97:de:01:
                    0e:f8:96:bb:ab:57:5d:50:f3:fe:b8:98:eb:88:ff:
                    3a:4d:50:f9:fa:1e:9f:c7:27:8c:a6:93:09:16:cf:
                    15:b9:33:68:61:5f:03:b2:a2:6a:6f:f3:20:49:9b:
                    48:d7:9a:ca:93:db:65:00:0f:d6:3a:dd:98:4b:19:
                    c6:20:64:69:43:5d:0d:ef:18:92:2e:7e:7e:82:b3:
                    24:65:57:f5:7a:ef:d3:c1:cb:1b:a1:c1:29:97:de:
                    55:a0:7c:e9:39:6e:61:a0:9f:ce:10:96:31:49:ae:
                    0e:67:99:c7:61:83:26:22:01:94:fd:24:20:b6:61:
                    74:9a:a9:52:ae:57:78:eb:0e:f3:49:6d:8a:45:46:
                    01:6c:82:a2:8e:a4:41:47:5a:9a:31:de:1c:72:d6:
                    b9:fd:0a:3c:23:33:32:bc:c0:e9:97:83:be:29:81:
                    6c:e1:45:1b:f1:21:83:1a:e0:e2:3c:2e:e6:29:32:
                    3c:05:d9:bc:6a:df:3b:da:3c:87:46:31:92:2f:92:
                    0b:93:63:5a:30:c6:c6:f2:12:3f:59:cb:36:50:e4:
                    98:e4:39:79:74:41:a7:1f:62:03:0e:31:57:79:cf:
                    53:e3:2e:47:3f:ad:ad:f0:aa:ac:45:4b:98:8b:e6:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:9E:4F:8D:6E:10:21:7B:02:D4:A2:EE:BB:75:BE:4C:46:95:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:f6:d7:18:e9:3c:5f:ef:a3:51:35:94:d0:79:55:95:20:
         91:8c:34:48:fe:a2:f8:ed:15:27:92:f7:42:f6:90:dc:b0:7d:
         f1:d6:a8:52:06:bf:27:92:40:5d:72:b3:5f:48:72:76:fe:7d:
         5a:32:e8:6f:1f:e4:c3:19:2b:d6:66:94:94:56:a8:2f:d9:00:
         fc:b3:58:f8:f5:d1:a2:2f:35:27:25:c0:69:3a:c9:76:08:c9:
         1f:d7:7a:71:73:64:72:f2:b8:9b:99:60:22:8d:90:d9:92:24:
         1d:90:29:e6:dd:9c:30:1e:90:ab:ba:ee:bf:8b:45:c9:99:91:
         b2:83:0a:e8:fa:28:4a:c0:04:9f:4b:5a:de:31:a3:2b:65:ca:
         65:a4:0d:eb:49:9d:97:f7:4f:12:af:17:2f:82:f2:9e:8d:8e:
         35:79:82:2b:4f:02:81:68:7c:bb:6c:11:af:2b:c9:ce:d7:28:
         10:33:56:18:cf:3b:47:64:7b:96:c4:cb:cc:30:19:f9:09:91:
         85:8e:7e:fe:0b:c4:7f:bb:ab:f8:ea:57:99:38:2b:86:97:25:
         f7:4d:66:fb:a6:83:aa:2b:3e:bc:99:ae:ea:a4:86:fc:c2:87:
         49:ea:25:a5:d6:0f:ff:89:cf:de:ca:b4:ef:85:4f:c8:62:e1:
         88:d4:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:09:58 2024 by rpki-client on console-fra.rpki-client.org