Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa
File:                     8f09f090-b8d4-3923-a80d-9ac4054485a2.roa (raw, json)
Hash identifier:          ktng2iX3MgWR0LiZaCvQdHChQhhS2hmqd50GU6+9trA=
Subject key identifier:   0C:F0:6A:A2:A1:7B:2F:D1:2B:FA:17:7E:71:21:2B:09:10:00:43:67
Certificate issuer:       /CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056
Certificate serial:       010D0C9F432858451480309EA1F6D312A7F8C080
Authority key identifier: AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     6621
IP address blocks:        162.223.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:30:9e:a1:f6:d3:12:a7:f8:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc97c6c8-f2ac-45fa-98f5-9b826f811056
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=0c561f36-20f6-4128-a443-124938189ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:9b:36:bb:ad:58:03:41:b5:5d:c3:54:cc:
                    2b:74:17:ed:ce:7c:df:3f:06:b1:2d:f1:c5:ad:f6:
                    25:88:52:27:06:54:59:d4:77:93:6b:2f:f1:ed:96:
                    48:5a:7c:f8:e8:af:8f:23:91:72:ca:41:28:06:b4:
                    5a:57:db:7c:6c:30:06:65:07:81:e4:9e:1d:78:01:
                    c7:9c:91:dd:0b:f6:56:88:31:57:fa:f0:af:e2:3c:
                    ef:93:8f:c8:b9:d8:ae:36:08:63:5b:4b:c1:4a:61:
                    7a:85:b0:b2:a4:53:75:92:f2:08:29:00:ef:e3:68:
                    97:52:3f:61:7b:39:3a:0e:a2:08:88:7a:52:67:c1:
                    d3:2c:3c:83:34:12:5a:4d:38:a7:b8:43:7a:bc:4c:
                    8b:de:1c:d0:99:7d:cc:42:58:06:33:7a:07:c0:63:
                    a2:0a:bd:6b:c8:bc:6f:4c:b8:88:3e:d1:ff:90:cb:
                    a1:a1:be:d6:89:db:ee:f6:5a:14:a0:dc:cb:4e:ec:
                    46:22:42:ec:87:7c:8d:27:c6:64:5e:03:a2:43:bd:
                    ce:00:3f:dd:0d:f4:f4:30:19:5d:f8:63:73:a2:8e:
                    76:8f:1b:5e:c8:8c:4d:42:73:d8:d3:92:ee:19:e6:
                    cf:24:a3:94:ac:29:45:21:d3:44:20:d9:33:ad:62:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:6A:A2:A1:7B:2F:D1:2B:FA:17:7E:71:21:2B:09:10:00:43:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/8f09f090-b8d4-3923-a80d-9ac4054485a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056/fc97c6c8-f2ac-45fa-98f5-9b826f811056.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:16:D1:14:55:88:95:2D:D3:D3:C9:19:AD:8E:5B:EB:6B:7B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc97c6c8-f2ac-45fa-98f5-9b826f811056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:44:21:97:68:1d:e4:c2:02:ad:c4:f6:f5:80:b7:b0:3d:b3:
         ab:62:b3:98:9c:70:ea:89:4f:61:4b:5e:be:6c:bb:5a:b1:e1:
         dc:b7:8e:51:a8:26:58:c5:41:55:8e:9a:01:b3:4c:a8:00:0d:
         6e:ec:35:78:f2:8c:79:8c:75:b7:43:80:8f:e7:7c:53:19:cd:
         10:f4:73:83:90:ff:ac:4b:47:a5:16:d2:8e:f1:47:50:ed:b0:
         17:cd:3c:20:fe:8e:d4:72:3c:8c:e7:a4:03:b1:30:94:42:8b:
         50:0e:d7:0c:61:7d:1e:8d:df:a3:d9:5f:fe:7a:e3:15:97:b4:
         2c:23:1d:ea:76:c4:c6:dc:32:a2:9a:17:82:96:80:b3:45:28:
         11:9a:72:f9:e3:ab:0c:8c:1c:cb:3a:da:01:ff:ee:67:e8:b0:
         f1:86:73:44:e7:6e:52:fc:f4:44:d5:c6:31:6c:35:62:e7:a0:
         8a:a9:65:11:a9:a0:0e:03:df:97:6a:23:14:a9:5b:12:e5:6d:
         ff:58:fb:f9:b3:79:0d:e3:c3:32:e3:9d:3e:ca:c8:f7:81:1e:
         be:ec:a3:59:ee:20:7d:3c:f8:1e:05:96:b5:8a:c0:4a:ba:9f:
         08:7f:ca:f7:90:78:47:c1:12:14:24:2c:d8:21:da:9e:0b:e2:
         c5:c8:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:26 2024 by rpki-client on console-fra.rpki-client.org