Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa
File:                     0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa (raw, json)
Hash identifier:          +x2l1DoKOJJ4pwT3iZJfEDCdkIkJGQ+kIIlSJDg3n10=
Subject key identifier:   4D:E9:B9:7D:64:D1:6C:49:6A:71:A6:C1:33:8F:9D:71:5C:6E:E3:DC
Certificate issuer:       /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial:       010D0C9F43285845BC336112DA5FA964943AE7C0
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa
Signing time:             Thu 02 May 2024 03:41:34 +0000
ROA not before:           Thu 02 May 2024 03:41:34 +0000
ROA not after:            Wed 31 Jul 2024 03:41:34 +0000
asID:                     4213
IP address blocks:        107.6.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bc:33:61:12:da:5f:a9:64:94:3a:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
        Validity
            Not Before: May  2 03:41:34 2024 GMT
            Not After : Jul 31 03:41:34 2024 GMT
        Subject: CN=20ad941d-a931-4009-882c-35e3ddaeeded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:a1:14:35:29:4b:b0:d9:5c:b8:ef:1c:df:
                    b2:ae:01:79:e2:20:c0:f4:5f:8f:61:1d:e1:1a:ec:
                    2d:fe:dc:9d:88:bd:88:d3:ce:9f:43:f4:f0:59:37:
                    2e:7c:2f:cd:e9:ba:03:21:41:ff:69:5a:c2:86:7a:
                    6a:48:08:02:e1:49:33:3a:20:b4:d4:62:57:c3:dc:
                    2c:25:1b:8f:4d:e3:bd:9c:f7:8a:23:aa:5a:5d:65:
                    71:d6:12:a6:d1:96:da:96:8c:39:06:cb:43:8e:b7:
                    89:3e:ea:18:b7:a5:19:41:04:e5:a3:c2:98:e0:e3:
                    01:44:b3:52:f7:e3:f0:55:db:19:91:cd:1b:85:94:
                    96:47:8b:b1:42:9b:c6:72:f4:dc:26:c1:e8:bf:46:
                    b2:23:c5:5b:e5:f2:a0:b9:2d:1e:49:ee:91:ad:6d:
                    8d:25:3c:08:40:16:1f:a3:41:5a:bb:86:55:b4:5a:
                    ea:d7:c9:a8:1c:7a:46:ca:5d:d2:3e:56:10:c1:42:
                    a7:eb:b2:6a:ab:d4:20:76:54:e6:e6:35:88:cd:54:
                    c4:5a:3c:38:2c:e2:13:54:d3:1a:e4:e7:3e:91:d8:
                    62:cd:18:c5:10:ff:25:69:4b:cc:58:74:88:19:cf:
                    66:10:4f:b3:14:d3:3b:7a:a1:1c:fa:65:6f:bb:cc:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:B9:7D:64:D1:6C:49:6A:71:A6:C1:33:8F:9D:71:5C:6E:E3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl

            X509v3 Authority Key Identifier:
                keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.6.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:cc:06:21:e1:7c:4a:99:6f:28:3e:75:ab:6e:ce:3f:1c:
         ff:4f:f7:5c:bb:a2:bd:28:c1:2b:c8:8a:30:f4:6b:04:4f:d5:
         3b:3f:b5:e5:b8:98:de:d6:9c:d3:67:11:de:36:6a:99:53:6c:
         69:54:7f:e8:0a:32:02:bb:38:ac:af:3f:ab:ce:35:98:28:6c:
         81:b0:a8:16:20:57:d9:7b:91:ce:32:6f:cf:6b:a2:ac:6c:a6:
         11:48:16:de:fa:80:0b:77:03:29:df:60:96:d0:1d:d9:88:a2:
         98:de:c8:72:d5:42:53:db:e7:f4:77:24:92:1d:24:d6:3d:ca:
         6f:35:e7:ad:05:a2:d1:b4:36:67:7f:65:4e:51:7c:34:e0:b3:
         88:80:ef:93:ca:d6:1c:b0:00:dd:35:8d:9d:71:6f:e6:ee:f9:
         01:c4:85:b1:34:eb:a6:38:d7:ec:c7:64:2e:51:13:a9:28:06:
         c2:98:ff:85:c8:fd:58:27:a2:25:0a:27:50:eb:ed:e9:bb:2a:
         eb:0b:3d:81:24:d9:1f:34:9b:94:24:e3:57:73:25:77:96:0a:
         b8:fd:fb:d0:00:20:1c:de:2c:42:01:90:6e:b9:00:6e:38:d3:
         b8:35:13:5f:80:f5:66:bf:4f:86:0f:44:33:57:f2:af:f2:cd:
         1c:ac:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:27:28 2024 by rpki-client on console-fra.rpki-client.org