Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa
File:                     a0012c73-5379-3986-9459-b361a90bcb87.roa (raw, json)
Hash identifier:          +xRGq+tufvULQVagIj61Y8ZGjBPC1TWNCW5jhNgLyqk=
Subject key identifier:   40:E0:D5:E2:75:3E:15:27:CE:7A:93:D6:9C:5D:4F:F7:A6:BE:64:15
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F432858456C530FE2AD6CFE4C3527F040
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14907
IP address blocks:        208.80.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0f:e2:ad:6c:fe:4c:35:27:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e6330d0c-5e43-4a67-b661-50dca141ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:9f:60:b0:4f:41:77:d5:e6:f4:7c:e7:d6:
                    52:93:02:6b:9b:10:04:78:0e:12:bd:e7:3c:7f:9a:
                    ec:72:a8:63:12:c5:47:6a:7a:ce:b0:7d:7b:c8:e5:
                    1e:bc:b6:9e:8d:8c:9a:22:bb:ca:a3:27:81:9f:cf:
                    f4:c5:71:b2:fc:40:92:10:38:96:dd:ba:b4:86:26:
                    0d:6b:c3:fc:8b:27:88:72:2a:1e:a5:66:3c:77:8e:
                    5c:98:73:77:5a:71:72:c5:9f:55:cb:7a:57:84:de:
                    29:40:c6:7f:d5:d8:2e:e7:ab:d8:af:d0:87:8d:cc:
                    8c:30:ec:5e:68:58:94:5d:04:a3:f1:2b:9c:db:0e:
                    b4:48:ce:22:d6:81:33:94:bf:24:da:ca:62:a7:82:
                    53:2f:f7:44:12:c7:b0:b1:c0:32:b2:d8:a1:eb:e3:
                    7d:97:8f:b7:04:e0:4c:8d:91:d1:1b:6b:6e:db:c2:
                    9a:9e:84:ec:f3:8a:07:6d:77:33:b3:e9:78:e4:b5:
                    65:6e:d2:83:50:3f:5d:41:44:fe:80:87:97:d5:98:
                    62:e4:98:39:de:1f:69:3e:7f:1f:ea:19:03:38:84:
                    53:20:24:20:51:e4:59:5b:35:13:1d:15:1c:83:a6:
                    97:53:e5:cb:e2:ca:87:5d:c7:59:49:8d:1f:f0:ee:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E0:D5:E2:75:3E:15:27:CE:7A:93:D6:9C:5D:4F:F7:A6:BE:64:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:97:c3:f8:5b:d6:ac:0c:99:db:07:ae:5a:8a:bc:81:43:0d:
         4b:63:e6:cc:b1:34:02:bd:a9:eb:58:b6:25:62:4b:41:3d:da:
         ce:10:13:e2:dc:4a:b5:d9:f0:6f:f4:43:ca:dc:90:48:bd:9d:
         0e:be:20:af:2f:98:7b:00:43:de:7d:33:ac:71:b6:ed:7c:35:
         6e:ce:56:64:13:72:c3:e9:7a:c5:0e:71:2e:a5:74:d1:9e:06:
         da:93:2b:6c:76:d7:3d:d3:05:26:aa:00:fa:1e:90:35:b5:3b:
         01:65:66:73:a3:35:53:72:ba:6c:4c:22:56:38:9f:f0:99:53:
         37:5f:c1:a2:29:27:cd:c7:89:c2:59:26:66:6c:5b:ba:e0:87:
         76:49:ff:2c:c2:24:5d:00:5a:1e:6e:ef:b9:b4:16:63:68:c3:
         43:6d:19:6a:e8:45:e4:3f:46:2a:9c:c7:7e:de:91:68:87:90:
         32:94:19:30:18:32:71:1b:6f:49:a6:23:96:a0:f2:1b:5d:12:
         22:d3:09:46:ec:d2:9d:63:94:85:ef:df:b5:1e:47:e5:b8:58:
         55:9a:b1:eb:22:2d:40:d3:7c:e8:51:57:86:6b:c5:53:68:cd:
         ba:73:07:28:0b:ff:01:ba:f6:32:6b:38:f5:da:23:78:58:b9:
         2b:5c:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:33:06 2024 by rpki-client on console-ams.rpki-client.org