Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa
File:                     b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa (raw, json)
Hash identifier:          8dcckmi3f5o2jld5rGwyMgHrmtLlP5zQ8r+zODjkLWY=
Subject key identifier:   3A:14:9D:DB:92:15:FF:3A:A9:C8:B1:05:7E:6C:06:3C:C0:DA:1F:36
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F432858457FE82E544612C674E3CF25C0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa
Signing time:             Wed 10 Apr 2024 13:21:33 +0000
ROA not before:           Wed 10 Apr 2024 13:21:33 +0000
ROA not after:            Tue 09 Jul 2024 13:21:33 +0000
asID:                     9009
IP address blocks:        173.245.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:e8:2e:54:46:12:c6:74:e3:cf:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Apr 10 13:21:33 2024 GMT
            Not After : Jul  9 13:21:33 2024 GMT
        Subject: CN=e4466ba6-ba1e-4e89-b3a6-473f1f5bc0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:be:6d:3e:29:c3:61:ef:b2:2d:c3:8e:56:
                    18:e5:23:e0:ab:5c:e9:d3:7b:28:6e:62:71:1e:7c:
                    b6:f4:ea:08:06:f4:9b:52:83:2e:8e:04:57:ae:d4:
                    80:c1:b8:8d:7a:80:d6:4b:99:4e:ad:14:4c:f6:0f:
                    35:02:f5:1f:f6:d7:a3:33:3e:13:c2:35:29:7b:0e:
                    43:0c:c9:34:e9:9e:2c:e5:9d:26:73:45:63:72:b3:
                    bb:74:24:4e:e9:32:c3:96:ef:77:a2:54:96:98:47:
                    b8:1b:69:3f:ef:d3:a7:90:2d:54:c1:74:e7:1f:01:
                    23:35:85:4b:2c:35:b3:8c:86:db:4c:10:66:92:35:
                    73:d1:29:4b:f4:e2:19:69:4c:63:d6:37:1f:b1:87:
                    13:a5:94:d3:0a:43:85:45:03:68:9f:7e:be:1c:48:
                    02:54:67:fc:d0:2c:b2:d4:db:72:31:73:75:0d:30:
                    9c:25:56:6d:73:e3:5b:0c:0f:f4:8a:7b:80:11:ce:
                    3c:69:47:c1:a8:77:13:b1:ed:59:dc:44:c1:ef:ee:
                    f9:27:3b:ff:f5:7a:6a:50:5f:48:db:cf:b3:9a:5b:
                    15:a3:72:09:f1:97:d4:12:17:ea:f9:71:e2:ff:6e:
                    a7:11:b4:dd:7b:5f:1e:81:47:93:b5:ab:e3:44:e3:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:14:9D:DB:92:15:FF:3A:A9:C8:B1:05:7E:6C:06:3C:C0:DA:1F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:24:f4:51:cc:94:ac:20:57:61:19:e0:ee:2d:6e:dd:08:
         ae:93:2d:64:a0:3b:e6:03:8e:c0:81:d9:93:9c:f9:07:f5:37:
         b4:b1:79:58:0b:97:85:80:0e:c9:d3:57:ab:27:63:79:a5:3d:
         0e:b6:4f:c9:63:44:09:cc:0c:f9:4d:22:95:a0:73:44:e3:53:
         cc:52:a2:8d:43:be:29:36:fc:75:be:c4:39:75:2d:a4:ef:d1:
         8f:70:16:14:79:ea:35:b4:d0:6b:3a:c9:cd:f2:9b:f1:b8:67:
         5f:d9:37:88:5f:41:6b:02:1c:d2:cb:95:7b:c2:04:f0:b1:1b:
         8a:28:7f:1e:6f:92:a0:4e:5c:89:69:00:a5:46:5e:6f:26:b6:
         f7:9b:a3:b7:db:44:e7:f9:34:f4:1e:e6:4d:ba:e4:a8:71:ac:
         dd:9a:00:83:e2:e2:84:d6:2f:e3:7d:76:cd:d0:58:01:2a:37:
         75:fa:04:cd:af:34:80:47:8a:0e:f4:3f:a0:99:81:4d:b3:30:
         da:a5:9c:15:61:34:94:c2:e8:a0:26:97:79:66:e3:66:1a:e3:
         f5:b1:28:a2:f6:5f:5f:a7:0f:b1:ad:70:3e:2b:bc:32:52:c6:
         49:b3:23:71:7b:82:01:6c:de:50:20:c7:99:3a:f6:eb:e8:cf:
         48:2e:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:05:51 2024 by rpki-client on console-ams.rpki-client.org