Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/bf3e8c8c-43fa-3f65-b74f-5540f19f3dbe.roa
File:                     bf3e8c8c-43fa-3f65-b74f-5540f19f3dbe.roa (raw, json)
Hash identifier:          REsjr4OAaYmP5kwW08rEjIablBgfTrXLKP4euEt/arw=
Subject key identifier:   36:0C:D4:1B:B4:7B:C9:7B:5F:8F:93:EB:48:EC:23:B0:45:6C:28:64
Certificate issuer:       /CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Certificate serial:       010D0C9F4328584563F310652EB8AC5CCAD07680
Authority key identifier: 9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/bf3e8c8c-43fa-3f65-b74f-5540f19f3dbe.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        173.195.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:10:65:2e:b8:ac:5c:ca:d0:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=3d36a23f-f0e0-4557-b383-0833b8ad6314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c6:0d:7c:ea:4e:4c:25:e6:eb:43:ef:f4:2e:
                    06:dd:1f:b7:df:5c:7d:b9:1f:ca:fb:02:8d:6e:53:
                    5e:f9:48:22:6e:c8:45:70:cc:22:77:5d:7e:b3:3d:
                    57:15:40:63:5b:9b:2b:3a:70:94:bd:72:8e:2a:ff:
                    13:a5:ec:9f:fc:7f:3c:7e:24:1f:c9:bf:4e:f2:70:
                    1a:9a:18:35:69:73:4f:32:ac:f5:8f:9d:3c:3b:ef:
                    fa:e1:ee:59:65:4f:4a:40:24:6f:35:dd:94:66:df:
                    bd:74:72:d8:09:b1:1d:9e:fa:64:3e:bb:ea:63:a9:
                    f5:4f:c1:f5:b6:a8:70:89:d7:a2:b3:5a:4f:14:5d:
                    77:f3:f6:6e:59:10:b2:22:1e:34:8d:39:8a:d3:dd:
                    9e:9b:fc:f8:50:ee:75:e9:5e:3c:53:4e:e7:81:02:
                    99:5b:df:75:e6:f9:9b:0d:9a:3c:b8:61:fb:35:75:
                    d2:66:1d:6a:fb:be:13:ce:a8:8e:da:c9:33:a1:db:
                    64:6e:ba:02:a9:71:2c:1a:53:93:60:7e:ca:a5:2e:
                    70:32:7a:e0:91:d7:61:a1:56:48:71:0a:76:8f:f4:
                    e2:9b:83:8a:58:45:78:7e:75:2d:b6:f7:a7:10:25:
                    db:35:b2:77:0c:92:0a:0c:a5:11:bd:85:d4:88:78:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:D4:1B:B4:7B:C9:7B:5F:8F:93:EB:48:EC:23:B0:45:6C:28:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/bf3e8c8c-43fa-3f65-b74f-5540f19f3dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:d3:25:7d:43:06:64:f4:2d:98:fb:38:30:43:dc:a4:c8:
         6b:1a:66:5d:01:ad:fa:94:9d:47:13:13:eb:c7:f4:c6:8f:ca:
         88:52:94:b6:00:c1:6d:85:1f:67:8b:fe:00:15:12:f3:8c:6f:
         34:df:20:1b:7b:be:0d:ea:e9:c7:bb:b7:2c:70:fa:85:06:d3:
         21:80:b6:26:a2:05:3a:9f:8d:dc:bd:5e:21:43:09:65:8f:61:
         20:88:bb:62:17:09:0b:cd:50:82:21:a1:69:e7:d6:f3:2f:b2:
         51:41:c5:db:a1:81:06:bf:9f:6d:93:03:07:63:3d:1b:a3:df:
         ce:d6:52:c9:61:18:06:51:24:67:a5:b8:e9:86:e6:4a:86:d1:
         36:6f:9c:ea:a3:95:de:03:41:ee:63:2b:a3:3b:98:c3:dd:89:
         82:8a:8e:a6:17:33:66:ca:ba:69:96:d9:46:40:9f:0c:25:50:
         3c:82:c9:1e:74:e1:55:e4:33:ce:7a:90:35:c6:ca:9a:e0:a6:
         48:b8:24:b5:ba:9f:ff:e9:e8:1e:fb:8e:15:6e:cf:6d:5a:33:
         4a:2b:92:12:c4:d5:3e:a0:0c:f5:5a:05:7a:4f:77:ca:75:69:
         2d:d3:2e:30:3d:bb:9f:e9:da:a1:f2:fc:8d:55:43:a8:ef:1d:
         5f:43:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:03:08 2024 by rpki-client on console-ams.rpki-client.org