Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa
File:                     9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json)
Hash identifier:          QBFp8KYvLJktAs8Eemo8/CEQfIEda3bu6qujXE2n0Nk=
Subject key identifier:   C1:2D:F0:E2:76:88:AE:95:06:30:CC:08:07:52:56:10:98:8E:F4:62
Certificate issuer:       /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
Certificate serial:       010D0C9F4328584500F5639DCE9F35D31EBF6E80
Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        209.127.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:63:9d:ce:9f:35:d3:1e:bf:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=84e36e6f-d691-45a9-8b91-8660499fed53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:86:10:1a:2d:c8:ea:84:cd:4a:40:6e:0b:
                    47:cc:09:c8:cf:3c:55:95:a1:f6:14:3f:7c:33:6b:
                    d0:99:b5:53:b1:b6:bf:a9:e6:4f:62:3d:cd:15:e6:
                    2d:aa:ea:9b:e2:4e:2f:5b:a6:8e:41:61:46:73:c4:
                    2f:33:ce:7d:16:3a:b0:a2:8a:94:ea:79:eb:a6:83:
                    11:5f:34:77:24:fe:af:89:34:56:88:6c:0c:26:33:
                    4c:1b:c2:28:08:2b:ec:65:b8:b5:36:4f:fe:b7:51:
                    35:cc:05:02:43:73:08:ee:3e:ca:6c:e1:98:ce:9f:
                    f1:19:f9:25:4e:cc:b7:b7:c4:34:d5:81:81:9a:44:
                    fb:80:97:af:fc:79:a7:80:c2:3e:1e:f9:fe:dc:df:
                    9d:65:5b:24:12:9f:07:4b:49:46:95:46:93:28:13:
                    39:e3:1b:d8:3a:75:8c:ec:8b:eb:87:63:cd:de:1f:
                    71:4f:9f:8e:23:b9:fd:67:2c:19:02:4f:a0:26:b1:
                    a7:af:5f:ea:7d:f1:b8:da:7e:68:b4:7f:84:18:0c:
                    29:ce:7a:56:0a:27:e2:fa:a3:00:cb:f6:3c:58:a0:
                    7b:e8:a1:65:5f:72:94:f2:3c:82:b2:9b:3f:29:2a:
                    71:a5:b8:c5:08:e0:f3:36:d0:75:b3:4a:0f:c7:d9:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:F0:E2:76:88:AE:95:06:30:CC:08:07:52:56:10:98:8E:F4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl

            X509v3 Authority Key Identifier:
                keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:0b:89:a5:46:33:90:58:82:88:6f:00:ef:9c:a1:4e:fb:
         0c:fa:17:31:9a:0b:bc:35:02:53:f8:af:25:4c:ef:34:c3:16:
         3e:01:ec:f4:49:3b:ce:a8:91:35:ef:2e:25:6b:13:18:5a:eb:
         87:4d:6f:67:72:76:ea:74:72:dd:c2:b7:8b:19:42:cd:1e:dd:
         00:3a:3a:bd:78:8b:29:b7:c2:49:c3:b8:9f:bd:74:ad:9c:51:
         88:fd:13:5a:28:b0:4d:c3:2a:33:50:63:59:36:29:cf:c5:35:
         f1:47:92:09:12:70:6e:59:ea:38:e1:06:96:12:d2:d0:ac:b0:
         88:99:1c:28:b2:67:31:fa:9b:60:eb:09:a7:cd:32:d2:b3:69:
         ca:f7:52:9d:72:ff:3a:ce:e2:f8:ba:5b:a5:2a:48:f7:ef:1f:
         fc:fe:c4:27:a8:15:ed:f0:77:3d:06:05:cb:fe:3f:ef:3b:b0:
         ca:e5:0d:09:d8:e5:6f:20:da:71:12:f2:79:30:c7:cf:64:a2:
         79:16:2d:97:26:ac:0a:0d:03:0c:2c:93:57:bd:44:42:5b:7a:
         86:77:7e:fc:ae:10:b0:28:75:88:e5:cf:81:9c:c4:6a:27:42:
         f8:af:b3:23:f7:df:ec:ae:2e:4d:fa:62:48:18:1a:7e:3f:64:
         7e:14:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:59 2024 by rpki-client on console-fra.rpki-client.org