Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
File:                     fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa (raw, json)
Hash identifier:          NI8j2p4HXYajG798eVAcGZCzGX7B+d7VMtDCY5D2n8Y=
Subject key identifier:   89:43:AE:3B:3F:B1:0B:B2:D8:84:60:94:5D:61:06:43:42:20:0B:F0
Certificate issuer:       /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
Certificate serial:       010D0C9F432858454D9D7C87E8D9E6FE153665B0
Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     22611
IP address blocks:        209.163.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7c:87:e8:d9:e6:fe:15:36:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=381aac8d-16db-427d-8e6f-24cf909b30d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:cf:fb:8e:08:d5:85:dd:0e:ef:b3:c9:75:
                    77:80:65:f0:c2:e2:b0:b3:2d:3a:a7:93:10:98:15:
                    d2:62:95:27:b0:d5:c0:4b:37:c1:3f:61:60:02:14:
                    ec:fa:e5:98:d2:95:f5:d2:2c:a5:71:7d:50:85:49:
                    1d:f5:ab:20:63:ab:53:c3:45:bc:40:d4:10:b0:03:
                    eb:99:2b:72:f2:87:cd:9d:23:b6:ce:5f:8e:64:8f:
                    95:ce:40:93:15:84:3a:ca:27:7d:7f:bf:74:58:4e:
                    56:6c:3f:6d:6e:d3:91:cc:33:59:ff:e7:85:e5:d8:
                    e2:b3:a5:f1:16:31:69:9f:bf:77:9b:bf:41:d0:02:
                    e0:28:b3:81:71:49:d4:b0:1b:bc:e3:ff:82:0a:af:
                    09:98:44:c9:6c:89:76:1a:05:be:b8:d0:a7:4c:1e:
                    f7:f6:ce:91:43:c9:72:f3:0f:c5:19:0d:d3:a3:df:
                    73:63:06:ee:66:71:2a:87:cf:c9:30:8b:67:c4:75:
                    d0:48:6b:a6:5d:a7:c5:05:e7:25:21:55:bf:fe:4d:
                    b5:2a:df:82:e8:08:5c:da:80:f1:9b:b9:24:a3:58:
                    d4:c7:bf:91:31:2f:cf:72:9f:14:89:a6:3b:b8:01:
                    74:27:ff:ed:4f:f8:32:97:be:d5:b9:70:f2:3c:56:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:AE:3B:3F:B1:0B:B2:D8:84:60:94:5D:61:06:43:42:20:0B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:f2:22:78:8a:5a:51:9e:d2:77:95:6f:6f:37:ad:88:c0:
         0b:b7:29:61:84:57:da:b0:fc:03:bf:e5:10:91:62:59:3e:63:
         a3:1d:bf:ac:3e:68:1c:3b:3e:31:56:9c:8f:12:9b:68:2c:bc:
         eb:42:c8:0c:e1:b3:90:61:82:e7:cc:3d:a2:42:79:f4:de:3a:
         73:a9:f0:ea:bb:b5:4c:d4:cb:d5:73:30:b4:ca:54:1e:ed:02:
         d5:f6:03:8c:03:03:81:8d:2c:c5:ad:de:52:a4:71:48:7a:82:
         e3:67:06:61:53:64:9d:d8:61:65:ac:fb:7c:3e:b9:b8:c2:ff:
         f0:07:45:49:dc:62:5b:85:54:51:05:63:81:a4:d4:03:11:78:
         f7:b5:8c:1e:af:ce:82:5a:55:05:b9:22:4f:71:a9:36:20:24:
         ea:54:8f:16:13:de:f8:14:26:f1:86:99:98:ff:75:14:e0:ca:
         24:63:59:b2:c5:d4:ae:3b:26:02:96:6e:52:bd:0d:06:7e:99:
         84:69:e6:c6:18:7e:41:22:6a:87:e2:00:7e:5c:44:c3:00:8f:
         e2:d8:92:f9:f1:8b:d5:4b:57:83:7d:d7:3f:32:c8:15:98:b1:
         8a:0d:ea:f9:26:7d:aa:6f:25:77:38:1a:4d:e4:55:72:25:e0:
         f6:57:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:24:58 2024 by rpki-client on console-fra.rpki-client.org