Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
File:                     7d1782c8-6710-350b-a87c-af35b36707e0.roa (raw, json)
Hash identifier:          Pe5dle1u0weQWbNqY7SM5aJbhRqb0aTX4SkmuutSkb4=
Subject key identifier:   D9:D6:07:DA:09:BB:73:BB:C6:AD:5E:DF:1B:40:F4:BF:F4:4B:EF:DD
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F432858456C5315C759B5F6A3AD68CA40
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     63452
IP address blocks:        173.243.238.0/24 maxlen: 24
                          173.243.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:15:c7:59:b5:f6:a3:ad:68:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e8b86ad1-d86d-4089-aa40-862bc8823228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:cb:0b:4e:66:71:1d:c9:8d:ce:90:d6:08:
                    c5:53:21:6b:f0:d6:07:5a:c4:bf:a0:e4:e8:9a:67:
                    77:73:f6:88:e1:6b:67:0c:a9:b7:05:a6:45:21:fc:
                    aa:44:b1:06:b0:00:cc:84:26:4a:af:19:84:62:0d:
                    aa:06:7a:b1:c9:ec:e0:3d:ab:37:db:85:17:08:53:
                    ea:18:bc:9c:be:e8:ca:e8:34:7e:2b:1d:eb:f1:b1:
                    01:04:93:3a:74:14:e3:da:d5:8a:19:44:51:51:23:
                    f6:e1:d0:e9:30:c5:d5:32:53:cf:bc:cb:66:13:0c:
                    1a:00:d4:14:d8:d2:68:16:3b:2a:c3:5d:84:14:76:
                    84:2c:bd:ef:ae:bc:68:0b:92:7c:cd:f0:28:4d:37:
                    eb:92:c5:6b:1b:e3:01:65:f5:8c:7a:46:cd:0e:08:
                    b0:59:b1:ed:64:fe:0c:7e:8b:6d:6a:f4:10:e6:cd:
                    d9:62:fd:b5:fe:f4:d5:66:2e:81:ae:0c:73:4f:8d:
                    98:74:12:3b:4b:49:c7:47:46:cf:8d:ce:4d:97:ef:
                    72:58:b3:01:ec:06:0a:19:95:6d:1d:55:b9:4c:2b:
                    eb:49:75:b9:46:e3:95:fb:42:95:ff:0b:48:c2:5c:
                    2d:83:49:fd:08:0d:36:58:f2:98:c8:fc:38:ae:4e:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:07:DA:09:BB:73:BB:C6:AD:5E:DF:1B:40:F4:BF:F4:4B:EF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/7d1782c8-6710-350b-a87c-af35b36707e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:06:53:eb:2b:19:17:f6:9f:b9:64:fd:30:cb:f7:23:43:86:
         45:bf:82:ab:d2:07:86:1e:a0:e0:16:71:0d:42:72:0d:dc:23:
         d6:6f:dd:02:5a:79:3e:28:9d:80:ad:41:25:a9:5d:2e:c7:cf:
         71:45:47:78:2e:33:e8:df:c3:94:d1:98:e7:c2:00:ab:ca:bf:
         30:fe:1e:0f:dd:70:79:29:22:98:d1:e5:e5:0a:4b:41:56:09:
         01:be:f0:ff:b2:63:30:a7:15:c0:17:4d:0c:5f:0e:b8:0a:3e:
         37:75:28:5b:e6:e1:5b:78:d7:21:43:20:1d:8d:7e:cc:10:8a:
         1d:6b:db:7d:73:2a:63:21:d1:7f:f3:48:6b:c4:df:dd:9a:ee:
         75:94:58:20:c9:eb:a7:3d:f4:2f:97:b7:cc:1d:46:c8:4c:a2:
         f8:6c:6b:fd:33:39:0e:ca:36:69:b5:93:71:5f:2d:4a:32:72:
         2b:2f:4b:97:91:09:fa:8b:29:4b:c9:da:5b:c7:66:ce:19:05:
         76:3a:76:e2:b3:f3:3b:77:4a:05:3f:f3:8a:06:9c:c7:91:5f:
         0d:07:01:6f:1c:f0:5b:fe:09:d4:eb:3e:f3:38:4c:3b:ed:0e:
         3c:c8:b8:d1:52:9c:8c:b4:f0:28:da:e7:65:bb:b9:de:a0:15:
         cc:b5:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:22 2024 by rpki-client on console-ams.rpki-client.org