Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
File:                     cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa (raw, json)
Hash identifier:          XdMkIjYnjDsvDaqpQztpz1S7XFX5DPUub6ySqc+noOM=
Subject key identifier:   F0:FB:D3:AF:81:F9:94:19:37:16:21:ED:92:00:71:DA:FA:1B:CC:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845A9B414A8E7C033AE227A3020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
Signing time:             Thu 25 Apr 2024 12:40:32 +0000
ROA not before:           Thu 25 Apr 2024 12:40:32 +0000
ROA not after:            Wed 24 Jul 2024 12:40:32 +0000
asID:                     7342
IP address blocks:        209.131.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:b4:14:a8:e7:c0:33:ae:22:7a:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 12:40:32 2024 GMT
            Not After : Jul 24 12:40:32 2024 GMT
        Subject: CN=1817e35a-c6c3-453b-94be-5ce0f0705dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:df:7c:61:f0:41:39:81:76:26:83:45:93:87:
                    27:04:98:33:62:91:d0:34:2a:1a:b5:2b:4a:bb:25:
                    7e:92:d3:43:aa:7b:af:ea:36:e3:a7:1e:27:23:a5:
                    45:ba:66:61:f4:cd:1e:e6:1e:08:c8:aa:4b:34:f6:
                    13:2f:1f:ff:27:0e:c9:3a:f9:c2:9c:d7:35:f8:da:
                    3b:cc:f3:82:fb:a0:2f:8b:89:40:63:78:af:dc:3c:
                    24:ca:c2:40:83:32:31:e9:c6:2e:03:93:91:0a:06:
                    26:57:a5:00:c7:34:f6:65:96:7d:5b:7c:53:41:44:
                    58:5a:93:ab:99:72:60:82:ca:72:12:a5:dd:3a:f7:
                    34:19:50:3d:f2:d8:c3:cd:6d:4c:a0:65:0f:4d:ff:
                    32:29:0e:d2:cc:e8:c8:3e:f6:0c:7b:fa:25:b0:29:
                    dd:52:09:24:69:0f:94:94:a2:65:dc:e4:0b:f8:de:
                    92:eb:b8:34:61:d4:88:16:6b:1b:2e:1a:24:54:c6:
                    ee:70:7b:82:a3:f1:de:58:3f:91:19:41:cc:d3:59:
                    f8:93:49:95:90:2d:c9:32:0e:13:9d:aa:5b:44:2a:
                    8f:c1:e0:65:eb:e4:83:4c:27:73:c4:07:65:d6:34:
                    b8:91:2e:4e:0b:74:c1:79:48:9e:69:0f:16:c4:3c:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:D3:AF:81:F9:94:19:37:16:21:ED:92:00:71:DA:FA:1B:CC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:df:ea:08:c0:ba:c0:0f:90:ad:13:05:df:8b:08:d6:68:ea:
         e6:23:af:79:61:26:1e:3f:17:66:d2:8a:78:68:20:d3:74:09:
         aa:20:7f:d3:c1:bd:c8:9d:3e:13:e8:e2:45:79:75:64:da:16:
         3c:1e:12:97:94:78:f2:2d:52:64:54:a1:81:e9:0b:9e:47:33:
         45:b5:7f:bd:dd:f9:db:88:68:51:0a:17:e8:49:72:4d:ee:5d:
         14:48:b7:7a:d1:e1:39:30:cb:6b:e1:90:55:c1:19:7b:d8:73:
         07:95:e0:cb:d7:9c:14:ba:da:77:2d:c3:cd:8a:1b:1a:23:25:
         c9:03:78:02:04:3d:2d:e6:24:19:9d:5c:a4:aa:d5:23:5c:12:
         e7:93:b8:b0:f5:b4:1b:66:25:78:e7:f5:b1:df:63:62:22:b7:
         f4:e2:f3:b2:39:c2:9b:41:06:10:6f:9d:4c:90:f0:36:b8:06:
         f7:47:f2:55:30:87:bf:75:0c:31:e9:b9:8f:b6:e2:46:a1:0b:
         93:61:95:5b:a5:a9:d3:48:d2:61:b1:d4:f2:9a:8a:6e:57:7c:
         d0:af:f1:b5:a3:1e:e5:3e:5e:9d:c4:23:cf:70:b4:48:c1:7c:
         e3:1a:13:25:4c:13:23:77:df:7a:6e:60:65:de:7b:ad:9d:93:
         20:61:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:33:09 2024 by rpki-client on console-ams.rpki-client.org