Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
File:                     60adbf7d-4503-31a4-a156-6bae4b601738.roa (raw, json)
Hash identifier:          iNx6SDZ26kf7/fk3jCdcBWqRJqkWqaXvVHrboxFerg4=
Subject key identifier:   A7:CB:D7:A7:57:71:C0:C7:BC:08:4C:F6:C4:C7:AD:2E:8D:00:54:B6
Certificate issuer:       /CN=c66b7cab-031d-4c4c-8595-19848efd3058
Certificate serial:       010D0C9F43285844D17FC03CA8434D628ECB9580
Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     400339
IP address blocks:        147.136.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:c0:3c:a8:43:4d:62:8e:cb:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=34437d88-5d82-44de-82ae-8be12d753447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:42:40:87:32:b5:74:52:59:12:fb:8b:51:
                    30:a4:51:33:9a:2f:ef:19:22:96:19:6d:ac:f5:d6:
                    52:0b:57:b9:ab:72:db:41:f2:16:0d:76:ab:ff:68:
                    9c:fd:ea:03:9a:df:d2:d6:87:2a:d9:8a:a7:da:56:
                    7f:53:7b:e5:6f:c9:09:5e:f5:e5:61:69:0c:f3:ca:
                    11:b4:c4:c7:1c:c8:a6:b4:04:42:46:1f:e2:2a:92:
                    25:16:98:9d:16:10:28:ca:0a:c2:0e:51:94:ac:f6:
                    1b:e4:f1:2a:d2:6f:08:aa:26:e8:fe:03:a8:f7:42:
                    1e:c2:b7:fc:e3:51:d9:ee:2f:6d:88:22:e1:4e:f9:
                    1d:9e:7a:1d:33:49:94:00:5a:61:f8:e4:ab:5d:73:
                    0f:82:d6:22:82:1d:e9:c7:f0:a7:8a:e2:de:20:69:
                    13:a5:85:ce:ea:21:1d:67:12:5c:82:ec:cb:8c:a3:
                    58:1e:b1:3f:63:fa:f9:0e:e2:94:3a:75:ef:4d:0f:
                    d9:d0:82:eb:b5:e4:f8:f5:40:1c:13:18:dc:b9:0e:
                    2b:1c:e0:da:41:3d:a0:0b:99:b7:9b:f3:6a:2b:08:
                    5a:77:c1:f1:df:17:84:78:a5:18:2b:b8:0b:c3:9e:
                    18:9f:46:16:0a:69:74:3c:08:79:b8:2d:07:7a:b5:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CB:D7:A7:57:71:C0:C7:BC:08:4C:F6:C4:C7:AD:2E:8D:00:54:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:9f:b3:31:2f:9d:1f:91:a7:0e:8e:c9:66:48:10:c8:b7:
         48:ad:5b:e4:42:ea:bc:a4:09:0c:56:4a:45:fa:26:22:2d:3c:
         cb:ee:47:4e:1a:28:da:62:d8:77:e5:3f:4d:a7:46:18:d1:07:
         c7:d2:4f:b0:af:6c:f5:2f:ba:4c:17:5e:ec:31:fb:6e:33:51:
         cc:7f:ed:b9:a4:a2:95:b3:be:cc:97:ed:f4:f4:b7:fa:29:40:
         3e:a7:28:e9:7f:de:b2:d7:f7:af:63:32:cf:8d:e0:8c:9a:5d:
         11:6c:20:61:93:ed:63:a4:e6:3b:54:a5:c8:31:1e:c2:36:0e:
         95:41:46:ba:e1:12:5e:32:ea:9b:5b:de:0b:c3:c8:2d:da:9e:
         13:d0:77:46:5a:b9:3a:81:72:5b:b6:b8:9e:bc:88:9d:1f:26:
         77:af:77:71:e5:4b:3b:8a:f6:f3:63:8c:93:19:fe:06:cf:54:
         a5:62:34:d0:e5:17:5f:c6:41:78:ea:47:d6:19:17:25:49:03:
         4f:59:66:de:88:7c:1b:ae:b8:00:0b:2c:8c:6c:7d:fc:24:fe:
         60:de:62:12:42:00:10:1e:f1:09:c2:2f:1f:cb:80:cf:9f:65:
         34:99:98:39:a6:13:76:ce:3d:a2:59:fb:1d:86:f0:b6:92:c0:
         a7:6d:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:51:45 2024 by rpki-client on console-fra.rpki-client.org