Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa
File:                     8c9463a1-929c-31fa-a4f5-afed964ece4b.roa (raw, json)
Hash identifier:          qit1nrcr8Yz9h83a/500MvN2MfXLbU+G43fIu4X/o4E=
Subject key identifier:   DE:EB:10:F2:36:CF:A2:2F:A6:68:CA:CB:47:A9:9D:C8:E9:0C:DD:16
Certificate issuer:       /CN=8312a3ad-6ed7-4c70-90af-bc1b5471ce70
Certificate serial:       010D0C9F43285844E66FE9DA6C07F37FD32D1980
Authority key identifier: 8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     400363
IP address blocks:        207.167.122.0/24 maxlen: 24
                          2606:a1c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:e9:da:6c:07:f3:7f:d3:2d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8312a3ad-6ed7-4c70-90af-bc1b5471ce70
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=78adc8a0-fd52-47ed-9f57-9b2388f9cd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:92:e9:aa:83:73:e2:6f:6f:46:a3:c3:cd:
                    9d:4a:02:db:d6:16:70:a4:a5:2b:dd:0f:f5:f1:c5:
                    8d:77:86:82:fe:ba:6d:6f:c3:68:14:92:4c:e9:f5:
                    30:48:7d:72:35:34:9a:c5:11:2c:72:fb:75:b0:9e:
                    51:6d:cf:61:b6:98:29:e7:15:53:78:2a:0f:1b:24:
                    01:79:05:b2:2f:cd:34:8a:a1:a4:f6:05:34:61:40:
                    e1:49:42:bc:e5:c4:32:a0:b1:a0:5f:04:83:b6:12:
                    1d:fe:96:69:ff:5d:a6:de:b2:ca:c6:b2:e3:57:31:
                    06:f9:b4:b7:b9:9a:17:85:32:96:2c:c7:87:02:02:
                    bb:7f:1a:cb:be:30:ef:4a:78:70:de:50:7e:98:54:
                    db:66:c5:7d:dc:19:7c:12:3d:8b:ed:ca:94:30:d9:
                    01:9d:8e:cf:d3:ef:c6:44:fe:21:16:e1:25:bc:f0:
                    5d:2a:3e:2e:ad:00:ba:ba:cd:6f:0a:23:3c:69:bb:
                    db:e6:43:31:e4:64:76:d7:7c:9d:e1:98:3b:09:25:
                    32:cf:ea:55:88:18:68:31:4f:37:f0:ed:ca:b9:28:
                    d9:64:42:15:cc:01:c9:c6:70:f6:ff:c9:1e:1d:bd:
                    b0:8c:64:f4:28:4b:cb:6f:ca:3f:bc:dd:87:89:dd:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:10:F2:36:CF:A2:2F:A6:68:CA:CB:47:A9:9D:C8:E9:0C:DD:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8c9463a1-929c-31fa-a4f5-afed964ece4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:3A:34:CE:33:4D:F5:49:54:C1:61:0D:F5:F5:B8:33:C6:7E:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8312a3ad-6ed7-4c70-90af-bc1b5471ce70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.122.0/24
                IPv6:
                  2606:a1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:11:a1:46:ed:0a:ff:0d:37:5b:68:04:41:e8:1c:50:09:
         02:9c:bb:68:0f:ce:45:ef:50:21:ac:60:08:13:5a:1a:52:57:
         67:5c:4c:2c:75:b5:40:4f:35:b8:fc:85:b4:31:3f:07:e6:59:
         d4:50:96:d1:ee:2a:2d:d5:2b:db:a6:ad:60:48:99:96:09:9d:
         a9:3c:66:61:95:93:66:bd:50:50:7a:c0:22:8c:3f:fb:6f:f1:
         ea:f8:de:b0:19:72:c4:14:14:b2:6a:56:66:7a:83:32:d6:eb:
         f9:93:b4:22:5d:3e:92:1d:40:55:56:ea:0c:d8:a4:71:79:0e:
         b8:49:ec:b7:f3:a8:86:ae:ae:61:7b:52:a3:b6:cd:89:8a:4b:
         50:0e:a3:2c:51:7f:d4:f8:66:1d:4f:77:00:07:ee:1b:21:6c:
         82:a2:ea:a0:2c:0d:d3:50:06:80:00:b0:06:68:16:f5:fc:fc:
         bf:18:ea:1e:8e:39:1d:d3:4e:29:5e:4d:de:bc:e1:b0:04:99:
         fc:c9:c0:0d:6f:7f:ab:c7:d8:e1:c9:d0:91:ef:0e:53:6a:c4:
         5f:f0:f8:10:2f:0a:ef:03:6f:b2:0e:fc:ad:f9:c7:5b:bc:46:
         9d:1e:dd:30:bd:41:84:a7:4b:33:67:b8:32:1e:bb:fd:9a:18:
         d6:df:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:46 2024 by rpki-client on console-fra.rpki-client.org