Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/094744df-50f2-396b-b314-5721e7baf53d.roa
File:                     094744df-50f2-396b-b314-5721e7baf53d.roa (raw, json)
Hash identifier:          N1AUoeipIW4SlzPkqVsBMRjtS/mLN19qH46O7T8/Mhg=
Subject key identifier:   B4:60:56:E4:81:A1:61:6A:6F:36:B6:A7:00:77:48:A6:7B:E4:B5:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845A9B41691E83B0A2E41467440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/094744df-50f2-396b-b314-5721e7baf53d.roa
Signing time:             Thu 25 Apr 2024 12:40:32 +0000
ROA not before:           Thu 25 Apr 2024 12:40:32 +0000
ROA not after:            Wed 24 Jul 2024 12:40:32 +0000
asID:                     7342
IP address blocks:        209.131.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:b4:16:91:e8:3b:0a:2e:41:46:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 12:40:32 2024 GMT
            Not After : Jul 24 12:40:32 2024 GMT
        Subject: CN=a576054e-aec9-45ee-87e3-aaae3315a7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:37:7b:d4:f2:c6:a0:52:b6:6d:fe:d7:04:
                    9b:e0:ca:49:a7:f9:2e:ee:f7:0e:70:5a:bd:44:b8:
                    c4:b6:23:5a:59:71:46:8c:da:79:45:f7:7b:ab:ac:
                    9b:71:fa:c8:80:7d:ac:09:c3:8e:52:ae:7d:9f:3e:
                    d2:b6:ca:f5:b9:8f:f5:b6:46:cc:33:d4:04:10:89:
                    01:a6:6d:47:70:1a:d2:a9:bc:7a:e4:ef:59:a6:d1:
                    55:c1:34:5a:81:54:3d:d0:b6:f9:10:3b:98:8c:78:
                    20:ed:08:79:f0:99:77:7f:0c:61:3a:66:1e:36:70:
                    55:fe:64:8d:d2:ab:77:5d:57:18:a8:e8:df:9a:37:
                    9c:fd:13:ee:65:96:5a:ca:1e:f2:44:38:65:6c:59:
                    3e:8b:d4:c9:06:da:5c:38:41:17:88:f8:0e:7e:cf:
                    f8:4b:01:dd:a6:6b:a5:d2:22:24:da:c9:83:6f:57:
                    57:22:d8:48:f2:42:ed:da:77:04:b8:27:34:56:4a:
                    db:b0:e5:46:3e:50:12:f1:01:42:ca:85:61:03:f4:
                    5b:0c:80:ae:06:a4:8a:23:ea:4a:fe:f8:fb:4c:63:
                    aa:16:6d:d3:bf:59:30:8f:fe:77:3a:24:98:8b:74:
                    94:ed:00:cc:2f:74:11:c9:f0:45:26:64:a1:a2:64:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:56:E4:81:A1:61:6A:6F:36:B6:A7:00:77:48:A6:7B:E4:B5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/094744df-50f2-396b-b314-5721e7baf53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:81:5f:7d:e7:3e:7f:aa:51:9b:00:ca:72:df:70:ad:44:88:
         c2:42:3b:58:42:16:0b:7e:47:f7:3e:10:c9:76:a5:99:97:15:
         7b:e4:db:bb:df:19:d9:9d:d6:2d:61:44:ba:00:1e:31:7e:db:
         5a:74:44:55:57:c0:b2:6e:70:bf:ca:0f:73:6e:48:fa:8c:61:
         c7:01:e0:e9:fd:4f:a8:93:97:53:3c:b1:89:79:86:9b:ce:cd:
         49:52:e8:5a:29:1e:18:98:b9:f8:e4:94:e2:ce:1f:6b:db:93:
         84:a6:79:43:c4:02:26:e6:fc:48:c6:49:ce:c0:28:f0:e5:70:
         46:5e:08:9a:81:dc:36:f4:44:2a:9f:10:cd:01:73:fb:c2:63:
         63:97:5d:6d:47:63:ea:2d:86:7e:5e:a5:25:f7:3a:0d:d3:59:
         ed:e2:cb:11:cb:c4:e3:42:98:53:d9:4f:46:98:16:1f:fe:c5:
         cc:8e:cb:a8:f8:67:8a:b0:2a:aa:72:2d:95:90:3a:f8:af:df:
         33:2c:66:d0:5e:91:9a:07:17:9c:f2:2e:50:e4:e3:94:d8:de:
         6d:8e:6b:01:3f:22:f3:39:e2:be:be:4f:0b:ac:79:81:6c:93:
         2b:59:ca:5e:e7:e6:55:63:55:43:22:d1:52:0f:3f:03:f6:a6:
         0a:bf:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:49:04 2024 by rpki-client on console-ams.rpki-client.org