Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
File:                     4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json)
Hash identifier:          pHMvtaJGkW+mye9MZHnoUCHZSoE5xe1xMlVssUE4itI=
Subject key identifier:   E2:60:9B:28:8B:6D:40:32:D1:13:4B:E1:68:4C:BA:15:69:8A:9C:2E
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858455625128882C4EF7880F58A40
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
Signing time:             Tue 26 Mar 2024 14:20:17 +0000
ROA not before:           Tue 26 Mar 2024 14:20:17 +0000
ROA not after:            Mon 24 Jun 2024 14:20:17 +0000
asID:                     209854
IP address blocks:        172.102.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:25:12:88:82:c4:ef:78:80:f5:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar 26 14:20:17 2024 GMT
            Not After : Jun 24 14:20:17 2024 GMT
        Subject: CN=faceebf9-73a1-4061-893a-7e647d30a5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:47:95:2c:25:e5:8f:bd:7b:37:87:a5:28:
                    2f:57:aa:86:97:63:c7:c6:c7:fa:4c:77:9a:86:57:
                    af:ca:e4:40:52:fd:0d:5f:91:fb:84:07:67:3f:94:
                    e4:86:ec:11:76:94:8e:b1:f1:e6:a6:2f:85:74:91:
                    53:a1:17:e6:56:3f:28:de:94:e8:8f:55:90:35:c7:
                    75:4b:84:c2:3f:d4:ba:0e:a9:7a:af:c9:ac:e2:9d:
                    31:a3:6a:3a:03:e3:57:af:94:1c:d2:9b:54:68:63:
                    20:cc:4c:da:30:bd:45:e6:dc:1a:95:4a:b3:a9:e2:
                    5b:ef:23:e9:61:3e:52:37:69:b8:66:8b:dd:0b:cc:
                    0b:82:21:20:92:b7:36:86:3d:df:05:cb:9c:25:77:
                    ef:d7:8f:c8:98:9d:57:77:02:b1:e3:ff:21:01:82:
                    05:49:d1:b2:a6:4c:84:97:ea:9c:59:b0:4c:9c:ac:
                    8c:f9:c8:2c:5b:c1:a2:88:31:03:03:2b:c5:c3:c9:
                    6a:50:7d:29:1f:a4:92:f1:8d:7e:7d:e7:0f:99:55:
                    10:5e:26:c7:4d:e0:f9:7b:75:bd:c2:98:de:70:e1:
                    c9:bc:eb:6e:69:68:1a:69:76:ad:93:51:37:7a:76:
                    06:32:d0:20:4a:f0:27:4d:80:c7:e7:1a:0d:14:78:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:9B:28:8B:6D:40:32:D1:13:4B:E1:68:4C:BA:15:69:8A:9C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:65:13:63:cd:aa:79:9a:9b:6b:8d:39:9f:43:17:2b:2c:25:
         fd:ca:e4:49:c9:40:b3:c3:5b:1e:1a:27:98:db:da:e3:dc:d9:
         76:b8:2e:73:f4:8b:4b:86:a4:80:74:24:42:67:42:f8:f8:0f:
         c6:81:b0:67:79:42:6b:2e:64:1b:3e:25:6b:00:4e:8a:d8:88:
         f4:d2:1a:74:ea:5f:c0:92:b4:23:97:4d:48:3e:a1:6f:e9:df:
         d3:94:9c:a8:41:24:73:47:aa:81:c6:a1:98:20:6e:1f:07:bf:
         b3:c2:64:40:ac:00:16:29:d7:2f:99:4e:52:12:dc:0b:e3:d8:
         e2:36:a3:1f:f9:a7:29:c1:be:b6:21:51:7e:94:f3:16:37:57:
         7a:a6:c8:c7:98:d4:2e:e2:86:5a:7f:93:8d:7d:c4:40:22:cb:
         c5:4f:a8:eb:21:68:0e:7c:67:50:8f:04:8c:9c:0c:aa:b0:de:
         1d:fa:b4:67:e6:b7:4a:51:6b:76:3b:a9:d6:b3:76:40:6e:19:
         3c:fb:67:bc:96:cf:34:d5:2b:22:d0:03:a0:89:6d:a3:31:7c:
         06:e1:9d:c4:43:f7:e2:02:36:7d:8f:f0:96:40:a8:f3:55:e2:
         bb:f2:a3:f3:54:9f:b5:ff:12:72:bb:d5:14:fa:3d:c0:fa:2e:
         51:e2:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:59:36 2024 by rpki-client on console-fra.rpki-client.org