Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa
File:                     7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa (raw, json)
Hash identifier:          sYlVayuTR2WVPjn2qJS52uZNn00kb2EbXfvX587qC/Y=
Subject key identifier:   D0:B3:86:7C:09:AC:BE:C3:EB:75:F6:3A:06:96:FA:6B:57:8F:96:E6
Certificate issuer:       /CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
Certificate serial:       010D0C9F43285844D715246643F98A49CC2DCD00
Authority key identifier: C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     400421
IP address blocks:        138.84.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:24:66:43:f9:8a:49:cc:2d:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=8c4183b7-2bf8-4a20-a6dd-1c6edf8fc946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:52:77:5d:97:13:de:18:ae:80:31:23:a1:
                    50:00:9e:ac:fb:88:9c:fc:98:d7:63:62:75:ce:31:
                    f8:3d:34:6d:eb:7f:28:62:0c:bd:8c:ba:a8:fc:d1:
                    fb:cd:88:cb:4e:94:ba:01:8c:7e:d2:6a:00:ff:01:
                    d8:b4:35:5a:97:5a:ac:e3:aa:6e:99:bd:19:c2:2d:
                    94:e0:32:56:77:5a:ef:13:32:8d:56:02:d5:be:1f:
                    d7:e6:b8:07:c6:71:4f:e2:5a:7b:30:bf:98:3a:47:
                    a4:fa:05:ca:14:7f:16:7f:ee:71:aa:b5:81:fc:a2:
                    73:ef:16:00:90:e9:d4:c0:f7:92:64:c3:70:55:d4:
                    5d:ad:5b:51:65:8a:03:e6:2a:65:90:da:4a:65:c6:
                    c3:c1:ce:be:a2:2b:4a:31:a3:ad:95:1a:26:70:e4:
                    a5:01:b6:ca:a9:f7:b8:05:85:b8:f7:9f:98:b2:35:
                    34:9b:7d:b4:f2:5b:19:6f:fa:4e:51:c5:56:56:d1:
                    c4:78:a1:dc:8c:b2:af:6f:fd:66:4f:dd:3d:f5:b9:
                    38:e5:24:32:2b:d7:72:26:71:b9:90:0e:56:87:ff:
                    6d:39:6a:26:9f:60:b2:16:d1:2d:e9:9c:46:79:48:
                    25:1e:c9:49:62:d2:67:06:75:e2:b3:c9:41:fb:1d:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:86:7C:09:AC:BE:C3:EB:75:F6:3A:06:96:FA:6B:57:8F:96:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:84:83:6f:c1:3b:8b:31:62:75:7d:ef:8f:8c:c7:f7:16:2b:
         5a:67:ce:f6:f3:d5:20:26:71:25:03:1a:ba:46:7e:c3:c8:88:
         29:43:c4:23:8b:7a:73:6a:9a:ab:7c:09:73:84:8f:63:19:eb:
         9a:c1:e8:2b:7f:de:b0:fa:11:33:8d:f5:44:3c:78:b3:b8:be:
         3b:5c:d9:da:1e:3c:a0:4a:aa:d0:2e:d6:ca:fc:82:17:db:da:
         5a:5f:af:31:d2:01:34:24:d0:5a:26:c1:96:f7:ce:7f:c3:f3:
         18:fd:48:30:65:a0:5b:b9:e1:de:5c:67:4f:46:21:59:23:35:
         3c:42:cd:3d:a7:89:58:b0:f5:73:04:b4:ca:4e:cf:8b:85:67:
         ef:a6:c1:95:4a:12:57:3f:02:26:2f:0c:34:b7:10:14:7b:81:
         e8:95:aa:5f:db:47:2e:f8:c8:c5:02:4f:fc:7e:d5:66:5f:b8:
         75:88:1f:29:a2:00:10:d3:8b:95:07:57:f6:81:ff:5c:fc:40:
         50:70:2f:49:b1:5b:9b:06:9f:79:d7:e2:20:12:f4:30:57:cd:
         fa:55:64:4d:6e:b5:37:02:82:5b:8e:c8:b4:5d:c1:01:c3:5c:
         ea:96:cb:a5:67:39:84:fe:87:4c:35:1a:28:c7:4e:ff:52:9f:
         2c:38:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:07 2024 by rpki-client on console-fra.rpki-client.org