Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa
File:                     d981adfa-9f6c-3257-b035-07f610090697.roa (raw, json)
Hash identifier:          c7VGqowyQfYRhmGH5LAmvNZc6q5nJ+ImHoEbblr64IY=
Subject key identifier:   6D:05:EB:7B:20:17:66:AF:05:A5:89:C9:9D:88:7F:9A:FE:9C:13:00
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858453E42AD56A588B3A6CA666C40
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     26955
IP address blocks:        207.108.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:ad:56:a5:88:b3:a6:ca:66:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=dcfeb272-ca51-49a6-841f-d51ca4fef10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:f9:5b:e4:85:40:e3:7b:e7:74:1d:f2:d4:
                    bd:ed:f4:69:a0:2c:d6:c1:17:66:c8:e4:56:f6:b3:
                    76:08:9b:cf:2e:bb:13:6e:e2:be:ba:04:de:d8:d6:
                    c7:f3:4b:fd:93:18:0f:f1:cc:8f:25:df:8b:88:9a:
                    3f:f5:2c:50:37:e0:ae:ad:4c:65:4c:e9:d5:e2:4a:
                    b8:d3:f5:a3:ec:cd:17:70:f7:e8:54:17:c8:aa:0a:
                    14:d3:8a:28:c0:3c:9a:15:20:79:f3:d6:d5:51:44:
                    a7:af:e2:fc:66:cc:b5:68:0e:22:34:a9:3f:52:26:
                    d6:11:14:c4:69:83:93:cf:bd:ed:08:be:de:3a:05:
                    16:f2:fe:b6:ef:46:1f:63:eb:c5:12:f0:12:14:a1:
                    13:31:9a:c3:cf:cd:d0:0b:6a:25:fc:21:12:a6:0f:
                    82:02:9e:8d:53:ce:12:a2:69:a2:db:22:5a:0d:2b:
                    a5:b3:59:92:8d:51:e1:11:10:fe:1c:63:58:30:83:
                    68:71:3e:ca:c5:f2:e5:c2:d4:9c:59:db:ef:97:43:
                    65:27:36:81:29:38:6b:d5:4b:35:09:63:b6:99:09:
                    7a:95:5d:bb:87:d8:d0:e3:9b:47:51:c5:12:40:ed:
                    37:11:53:15:ac:b2:f0:4a:2d:e2:ac:16:bc:3a:84:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:EB:7B:20:17:66:AF:05:A5:89:C9:9D:88:7F:9A:FE:9C:13:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.108.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:1c:9a:31:fc:ff:03:cb:e9:10:73:6e:3f:43:0e:ad:85:
         79:82:88:47:b8:96:55:59:0f:88:1a:f6:0b:e4:1a:17:75:c0:
         60:3e:c5:9c:0b:0b:07:2d:a0:89:d9:db:1d:5f:42:db:f1:7a:
         09:60:42:da:50:4e:93:70:0a:a3:a3:12:6d:26:1d:c5:0c:90:
         8b:9d:fc:b1:3f:3e:ac:25:fc:a6:26:d7:21:bc:4c:22:d0:4c:
         ef:f7:bd:6b:a3:94:c4:2a:8b:97:10:1d:f9:c2:e9:3e:18:20:
         bb:95:1f:90:29:10:c5:5d:e9:ea:94:47:fd:4e:ec:de:9f:5e:
         be:0c:ae:7a:27:b6:a6:df:c9:aa:f0:54:ea:3f:55:5b:3f:a1:
         7f:7e:b1:60:b1:c6:ad:80:44:d0:fc:aa:5d:e2:ee:7f:48:5b:
         02:bd:0f:cf:ad:45:16:72:41:90:fc:cd:df:15:44:d4:e6:e1:
         fc:64:36:a4:bb:8d:32:e7:94:57:42:55:10:85:e1:cf:2a:78:
         65:c8:44:9c:15:c6:61:f1:b8:76:9b:ce:2d:22:f3:5b:23:2f:
         b9:3b:1e:c5:c9:87:32:e6:71:6a:ff:0d:29:af:bc:5c:93:6f:
         5e:33:72:bb:70:05:13:48:9c:f9:e5:06:09:96:4b:b3:2f:2a:
         cd:26:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 10:23:37 2024 by rpki-client on console-ams.rpki-client.org