Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa
File:                     718e6891-fcf5-3db0-9e48-283b9dd7e755.roa (raw, json)
Hash identifier:          MOApxROlEvPiJ/WLkB7l7y+kX2FKVaPTD44QwDluxwU=
Subject key identifier:   AA:ED:FF:C4:70:2E:8F:E8:E5:A7:46:F2:6E:0C:8B:0B:C1:35:3C:5B
Certificate issuer:       /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
Certificate serial:       010D0C9F43285845356EA6AE6956400FB9E7AB40
Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa
Signing time:             Thu 14 Mar 2024 21:06:52 +0000
ROA not before:           Thu 14 Mar 2024 21:06:52 +0000
ROA not after:            Wed 12 Jun 2024 21:06:52 +0000
asID:                     16509
IP address blocks:        204.154.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:6e:a6:ae:69:56:40:0f:b9:e7:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
        Validity
            Not Before: Mar 14 21:06:52 2024 GMT
            Not After : Jun 12 21:06:52 2024 GMT
        Subject: CN=45cdaf86-c98b-481c-b851-de051b9ef92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:0a:9e:b3:e0:8c:ed:c7:b2:5d:c9:cb:f7:
                    e8:90:a0:55:0f:46:8e:d3:5e:fe:5a:42:58:b0:14:
                    50:47:29:cb:79:06:e5:56:1a:30:a4:36:5b:3c:bc:
                    53:fa:9d:2e:04:d8:93:e0:be:df:62:06:f5:8e:e6:
                    05:c9:fc:40:c6:7a:e3:c2:a7:16:76:9b:1d:40:21:
                    87:27:82:1b:c1:17:a1:50:d0:29:29:4d:47:e3:e3:
                    a1:5e:95:ab:a4:06:02:d6:16:48:8b:38:33:9c:82:
                    5b:f6:01:53:3f:bd:0a:35:b7:f8:77:c2:cd:d6:c0:
                    69:41:2c:9e:45:9e:cd:a9:9b:7b:92:f0:a2:b7:f9:
                    66:80:b3:f5:ce:d0:0e:91:72:56:ea:f6:74:b4:83:
                    a6:77:7d:91:91:cc:eb:0b:8c:4b:9f:81:50:e7:8c:
                    e2:0a:83:f2:f1:87:e0:66:5d:7d:3b:8e:85:ab:48:
                    3e:b8:43:fa:1e:ed:6e:d4:44:61:53:4d:52:77:c9:
                    04:b4:33:e8:ec:5c:14:4c:82:be:d8:a0:9e:3b:a1:
                    8c:05:b5:8b:a3:e3:cc:4e:db:53:0e:c9:a1:de:c0:
                    05:4a:62:b0:c5:af:16:4a:86:51:56:c3:35:3e:16:
                    c9:b6:f5:e7:b4:7b:cd:8b:46:de:ba:83:11:4c:c4:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:FF:C4:70:2E:8F:E8:E5:A7:46:F2:6E:0C:8B:0B:C1:35:3C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/718e6891-fcf5-3db0-9e48-283b9dd7e755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl

            X509v3 Authority Key Identifier:
                keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:47:50:8d:3c:af:b2:e7:ad:24:ff:5b:4f:15:e5:bb:6e:
         31:8e:12:a4:f7:ad:5d:da:fc:74:d8:0b:df:2f:ae:66:1c:1e:
         a9:a7:73:d8:17:4b:26:df:b3:2b:ee:f0:cb:39:64:b9:96:ce:
         ef:36:11:7c:5b:e5:1f:c8:e6:7f:a1:bd:d0:66:0d:1e:8c:b6:
         f1:c6:27:6e:3c:71:47:f1:44:e8:78:ce:e3:8b:6b:73:13:3f:
         06:3e:95:54:98:bf:ee:78:18:21:e6:a5:f5:3b:b9:6b:a3:8f:
         0f:e2:e6:2d:03:b5:4e:ed:f9:97:72:56:ca:b6:f9:71:5f:65:
         a9:60:95:10:b1:1d:8a:60:06:df:24:8a:72:25:7e:93:94:1b:
         c4:4e:60:df:ce:8c:8d:09:22:45:e1:f9:04:7a:da:ca:55:c0:
         2f:d1:00:5b:13:1a:c6:be:c8:62:6e:11:d8:b5:32:0d:05:1a:
         ed:f6:a3:d7:84:00:66:d0:0c:88:6f:11:a7:c5:fd:e8:cd:32:
         6c:96:94:97:45:38:95:59:f6:5e:fb:50:4d:8c:21:7b:78:f1:
         96:4e:39:3e:f6:f9:9d:97:21:99:b8:f0:9e:e2:f8:e0:ac:38:
         f8:c9:86:b8:3b:05:ab:d5:06:51:b4:70:fd:e5:12:8c:58:56:
         f9:e0:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:25 2024 by rpki-client on console-fra.rpki-client.org