Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa
File:                     43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa (raw, json)
Hash identifier:          xoDOvWrjxMMZEC7gI/B5TWDUWNmiuJATMiB9W3SUQNI=
Subject key identifier:   A1:21:FA:CB:25:CF:7A:07:BD:B2:E3:C0:42:37:5C:E7:B1:8B:B4:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845A41D8550121A8F725CF4FB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa
Signing time:             Tue 23 Apr 2024 12:38:07 +0000
ROA not before:           Tue 23 Apr 2024 12:38:07 +0000
ROA not after:            Mon 22 Jul 2024 12:38:07 +0000
asID:                     7342
IP address blocks:        199.7.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:1d:85:50:12:1a:8f:72:5c:f4:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 12:38:07 2024 GMT
            Not After : Jul 22 12:38:07 2024 GMT
        Subject: CN=84b7f900-8a0d-4d17-a440-e6b79d4d35ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:6d:d9:85:8e:a3:20:a8:37:c7:99:0b:50:
                    b4:d8:89:c5:c2:72:91:a4:bc:0d:8d:7b:6d:48:df:
                    76:ab:fa:bd:64:55:7f:bf:19:7a:0e:2c:08:0d:69:
                    64:fc:33:ce:95:8a:e5:3c:b2:54:9a:b3:08:1e:fa:
                    0c:3f:00:2f:d1:b3:d5:fc:bf:4b:6c:16:75:ad:cd:
                    77:7e:b9:40:cb:6f:a3:0f:6e:67:5b:d3:63:12:74:
                    8a:d0:ec:3f:bc:ec:d6:7e:20:09:16:3a:3b:ab:74:
                    85:bd:57:57:4b:94:03:b5:78:d9:05:b3:9a:07:69:
                    9c:e9:e5:d8:d4:fd:d5:d1:05:48:08:7f:49:a9:37:
                    54:39:52:50:4a:dc:cf:cd:59:53:ed:0e:ed:03:60:
                    a7:5e:81:36:39:7e:ff:59:a2:f8:c0:5f:83:42:a2:
                    e2:2c:f3:69:e7:4e:be:e6:0c:14:a7:0c:fc:dc:cf:
                    2a:a4:b3:37:a0:9f:5a:22:b8:01:62:3c:3e:44:63:
                    93:d5:53:3d:e0:55:5c:68:d5:ee:d0:d1:68:7a:d1:
                    96:8f:ad:34:c0:0a:c9:55:9b:77:94:e8:98:9d:42:
                    7e:fb:e3:94:c4:1a:c6:5e:7c:eb:f1:d1:ad:d0:29:
                    75:e1:0f:6c:64:dd:29:a4:ea:e4:62:0d:02:2d:a8:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:FA:CB:25:CF:7A:07:BD:B2:E3:C0:42:37:5C:E7:B1:8B:B4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:34:2b:c2:9f:b3:d7:4a:1c:8b:56:92:90:9a:b6:96:95:0e:
         06:d2:1f:b3:e2:1a:65:5c:9b:32:22:be:f0:db:f9:4c:b3:1b:
         db:6b:92:3b:5e:95:0e:dc:4a:de:46:83:e1:9f:84:b9:b2:d6:
         30:ed:f4:fb:29:91:8d:3c:6f:18:91:db:51:ef:d5:7b:c5:ea:
         04:93:0a:a8:15:81:f3:85:ee:85:55:b5:03:5c:1d:01:97:14:
         f4:cf:29:21:8a:6a:e1:c1:52:b0:76:a3:d3:f8:19:89:41:c4:
         1e:24:f8:eb:d9:91:21:cc:48:3d:86:9c:49:2d:96:5a:51:67:
         39:6d:8f:1b:69:60:da:8f:ef:51:28:73:70:fe:a1:73:1b:a0:
         51:67:01:89:a6:68:f1:ec:a8:5a:58:a1:4f:9d:41:cf:3a:e1:
         63:da:0e:f4:2b:e7:a9:41:db:9c:82:a0:c8:83:75:68:ab:10:
         4a:ee:96:51:1e:a0:f8:85:7b:76:9f:56:fa:b1:5e:f3:0a:79:
         a7:15:09:b1:e9:84:10:f9:05:21:63:5e:0e:ca:f1:38:cb:de:
         50:7f:5c:9e:0a:3e:59:91:a3:85:e4:cc:f4:3d:bf:96:8e:69:
         cd:20:0f:6e:71:24:7d:35:a7:34:31:77:3c:db:e7:8c:cc:43:
         06:13:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:11:17 2024 by rpki-client on console-ams.rpki-client.org