Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa
File:                     639b27f4-2787-3a34-bea2-9dc5e60792e1.roa (raw, json)
Hash identifier:          q1E4A8VfgbdH8dTb4Bj51FSKsJvZx0hSkHDqlYugbmE=
Subject key identifier:   EF:A6:4E:54:22:EE:01:E9:28:1C:F4:00:8C:37:7F:E8:61:43:47:BD
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584558C83BA948F7FBB663BBA1A0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     3561
IP address blocks:        207.124.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3b:a9:48:f7:fb:b6:63:bb:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=5eb57186-e53a-42d6-985f-526fafffe2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:17:44:64:ef:54:eb:2e:79:0f:a9:78:b0:
                    16:01:f8:a0:48:54:c3:56:05:e5:78:84:4e:07:44:
                    7f:cc:80:30:e1:1f:08:8b:18:74:c3:50:ac:7b:3e:
                    c8:92:d7:58:d4:28:0c:b1:16:7b:c8:82:1c:9c:96:
                    7d:97:03:99:84:22:dc:fd:49:c6:6f:72:d4:47:2d:
                    89:69:2e:bc:46:01:d5:b8:73:c8:e2:67:f8:39:e7:
                    1b:a9:e5:fb:a2:8c:21:3e:c4:c7:ee:49:2d:f8:3f:
                    52:c1:39:c4:f0:49:f0:26:70:2a:82:bc:82:a5:00:
                    e8:c4:20:78:aa:67:2c:f1:8c:97:35:1c:8b:cc:8e:
                    14:2a:fc:bb:e3:5b:59:88:ec:ce:29:a9:63:26:d2:
                    23:41:9d:9f:e8:a5:83:22:87:db:f2:f2:29:0f:7f:
                    0b:d0:77:54:c7:06:b1:cd:7a:b9:b7:5e:6a:17:07:
                    ec:04:ec:55:ff:36:c1:9b:97:2d:f5:ab:85:81:27:
                    a9:21:44:d5:53:43:0a:53:ba:33:dd:16:21:dc:45:
                    ef:fa:31:df:26:a6:20:54:ad:bb:31:34:e2:23:d5:
                    01:8e:7f:48:8e:79:30:73:35:71:e3:43:43:2e:ae:
                    f4:8f:3a:29:5d:9c:63:aa:ee:2d:32:38:5f:86:3d:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A6:4E:54:22:EE:01:E9:28:1C:F4:00:8C:37:7F:E8:61:43:47:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/639b27f4-2787-3a34-bea2-9dc5e60792e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.124.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7e:67:2b:f6:bc:a2:89:3f:a5:a6:ab:8a:31:73:07:44:e9:
         bf:70:bf:a7:c5:d6:29:83:2c:b1:69:98:03:e1:58:ae:73:40:
         98:0b:65:dc:23:4f:e9:b2:23:15:f5:88:d3:7a:8a:b9:64:36:
         f9:ea:b2:19:3f:ca:6e:f5:e5:bd:be:7f:78:45:89:f2:a0:17:
         c9:ee:5f:4e:e8:22:cc:0a:06:e1:ae:fb:5b:2e:83:20:20:77:
         6c:19:85:34:c5:f2:fe:d7:9b:4b:aa:fb:a7:a4:e7:cf:a9:b9:
         a2:89:a1:53:5f:47:7a:eb:d2:cf:c0:cc:2d:74:21:53:10:ab:
         4b:ca:a6:85:c4:64:b7:c9:41:8f:8d:b1:d7:27:26:10:4c:0c:
         a3:e3:b3:e0:35:1e:52:e7:47:e3:ee:92:66:16:c3:84:15:b4:
         12:48:50:e6:4b:32:45:6a:bb:08:99:e6:34:25:d4:ef:1f:0f:
         40:65:56:be:13:c5:fd:6c:62:11:74:7f:54:86:77:02:3b:f9:
         9b:49:48:e4:90:bb:ee:f3:f5:44:eb:84:cf:98:b7:2c:16:0c:
         3c:4c:c3:67:04:3a:24:6d:70:b8:be:05:2d:5b:e1:f7:b0:75:
         ba:63:de:00:0f:4a:5d:51:fb:bf:d1:33:b6:3f:06:f0:99:ac:
         20:c5:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:26:20 2024 by rpki-client on console-ams.rpki-client.org