Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
File:                     73943a2d-24f5-3619-b3a8-476b23f5bbce.roa (raw, json)
Hash identifier:          dj4a734qW2V0qZ4TASjSx5nPWdzIk9QT1loKFPhS+oA=
Subject key identifier:   97:7D:4B:37:A5:59:0D:D0:D3:CB:CB:5A:1D:C0:EF:AD:68:B3:D3:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845962B9A21CC43D5F3F87C5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
Signing time:             Thu 18 Apr 2024 12:45:11 +0000
ROA not before:           Thu 18 Apr 2024 12:45:11 +0000
ROA not after:            Wed 17 Jul 2024 12:45:11 +0000
asID:                     7342
IP address blocks:        209.131.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:2b:9a:21:cc:43:d5:f3:f8:7c:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 18 12:45:11 2024 GMT
            Not After : Jul 17 12:45:11 2024 GMT
        Subject: CN=82f81b43-dcb4-4b62-a5eb-798f0a09b17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:49:f9:a7:fa:bc:db:94:52:c6:6b:3f:57:
                    29:fb:c8:09:47:4b:a8:f7:08:b8:9e:34:f6:c6:45:
                    eb:89:24:8e:0a:dc:12:ff:f7:3d:65:87:97:b9:df:
                    80:0e:4b:6e:ca:09:95:8f:a2:d6:7b:cc:d3:bf:3a:
                    d2:fa:6b:a1:73:d4:20:82:7f:e7:7c:b6:1b:8d:cf:
                    cb:06:d7:a3:89:78:2c:04:1c:ca:5e:61:db:3e:53:
                    84:a6:06:6d:ec:7f:03:95:59:c4:e1:0b:ca:9f:e8:
                    3c:ac:c4:f5:30:80:0e:cb:a6:6d:ef:34:d5:d8:10:
                    98:9f:1b:57:17:45:5f:0c:74:5d:19:3e:ce:28:40:
                    31:05:5c:18:4e:1c:3f:dd:1f:16:2e:4d:e4:87:a3:
                    69:87:f2:dd:48:bd:f2:21:04:54:79:b7:cf:ee:35:
                    11:5c:29:dc:3e:26:6a:bd:a8:41:ff:cb:f2:8b:f0:
                    a4:21:d2:9f:bd:8c:50:20:64:c9:b0:27:80:19:6b:
                    81:88:8d:4b:7f:4c:a7:70:7a:83:44:09:b2:c3:fc:
                    9e:be:eb:0d:85:77:b6:84:63:d0:19:ce:a0:54:6b:
                    2a:81:c3:42:8a:f9:f0:7f:07:02:d6:61:61:c0:41:
                    7a:b0:f9:dd:1c:49:4a:b3:08:e2:9c:cb:90:fd:2c:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:4B:37:A5:59:0D:D0:D3:CB:CB:5A:1D:C0:EF:AD:68:B3:D3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:9b:92:00:af:85:23:9b:bc:48:71:ba:f7:d1:a3:6b:7a:
         bf:9d:a3:c6:c0:65:c4:87:72:b6:19:11:81:f0:f7:85:99:32:
         ef:b5:f1:32:56:36:0a:5c:6a:4b:a0:a8:52:39:76:fb:a2:b2:
         9b:62:e2:26:ef:58:09:32:55:36:4f:bc:1e:79:b2:ba:d9:37:
         1c:8c:08:45:17:b6:ee:d9:7f:5b:f4:a7:0e:99:08:d7:4e:52:
         2c:2d:1b:b7:85:dd:45:b3:d6:52:53:33:87:fa:f1:95:11:e6:
         fa:95:1a:27:df:17:bb:f9:21:6e:fc:09:22:59:33:ac:58:12:
         ed:9d:68:58:b9:66:dd:48:0a:a8:0b:cf:5a:54:e7:9a:20:af:
         7b:31:84:0d:86:03:fc:c6:3b:26:6a:a3:be:0b:75:d3:f7:f8:
         5c:46:c3:40:bc:25:c5:96:26:99:26:64:61:8f:1e:56:10:9b:
         e2:d5:be:98:00:6b:fc:52:ea:22:87:c9:dd:8c:d5:08:de:65:
         58:09:30:df:fb:fe:af:28:73:38:89:91:4c:46:0f:1e:50:f4:
         35:c5:e9:dd:d5:9f:2f:5a:a5:ec:d8:5b:93:c0:a1:b1:83:e1:
         5a:be:9c:59:57:bc:1b:17:53:ba:c4:f5:b5:c9:68:3e:6c:1f:
         65:85:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:02:46 2024 by rpki-client on console-ams.rpki-client.org