Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
File:                     4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa (raw, json)
Hash identifier:          iHmFLaU3ejuicxDkcuk1Mn9C/Codoaob4atpwaAn148=
Subject key identifier:   A1:38:C1:F5:51:7A:9B:4C:9B:E3:0B:22:25:9B:CC:F6:FA:9D:D6:DB
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584518B049DF386479464D42FCF0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     134365
IP address blocks:        107.151.201.0/24 maxlen: 24
                          107.151.200.0/24 maxlen: 24
                          107.151.202.0/24 maxlen: 24
                          107.151.204.0/24 maxlen: 24
                          107.151.203.0/24 maxlen: 24
                          107.151.206.0/24 maxlen: 24
                          107.151.205.0/24 maxlen: 24
                          107.151.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:49:df:38:64:79:46:4d:42:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=e2c70e34-3d30-42f7-8971-4ab4c3de4140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:28:6e:ca:92:71:f2:8e:8e:d2:ac:c7:36:
                    55:8a:d1:50:79:0e:bb:ef:2a:61:d7:cb:bf:77:fe:
                    97:3e:79:5b:fd:5d:ab:5e:28:6a:50:fd:0a:ae:5b:
                    7b:e0:ad:26:56:4d:cd:42:23:28:f9:22:e8:2a:04:
                    9e:a4:dd:17:52:a5:c0:9a:74:da:19:2f:aa:fc:4b:
                    ee:e7:40:eb:88:82:1f:9f:e0:fd:24:d6:16:39:d9:
                    be:cd:cf:4c:52:0a:cd:51:33:c6:52:e5:8e:e3:17:
                    c3:da:17:29:15:eb:02:0b:33:82:ac:b7:cf:8a:99:
                    21:63:4a:fe:2a:1e:d7:20:9f:1c:56:9b:32:63:0d:
                    90:59:98:e4:e4:dd:28:c4:fd:67:5a:b6:a0:c5:2a:
                    13:4c:6b:ef:65:53:47:86:70:a1:dc:f8:77:26:01:
                    b8:d7:97:f6:16:3d:08:28:58:86:04:16:6f:89:3b:
                    af:2a:ad:ec:f0:bd:d7:76:64:43:ca:94:ec:69:9b:
                    a0:55:ae:65:b4:3b:2e:ac:b1:8c:59:66:a2:25:8f:
                    c7:c3:d8:f1:2c:99:40:6c:1d:a8:65:24:c2:08:42:
                    d4:44:64:21:23:a7:4c:c3:73:2b:c0:36:b2:80:85:
                    0d:71:84:63:35:cf:e4:27:7a:6c:0f:6c:a8:2c:ee:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:38:C1:F5:51:7A:9B:4C:9B:E3:0B:22:25:9B:CC:F6:FA:9D:D6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:14:d9:80:1b:53:81:8d:e9:a7:82:5b:8f:9b:11:ad:50:
         95:88:9c:44:3f:a5:64:c6:cf:79:b3:91:45:7e:fa:f2:dd:0f:
         1f:79:2b:de:fb:2b:b0:3e:ca:22:3d:2d:c0:5b:42:b7:9d:3c:
         8e:4e:8f:c4:29:28:43:de:79:d3:7b:16:9b:d5:6e:e0:29:cd:
         26:59:34:77:1b:e3:f9:73:9d:94:3f:8c:00:32:c0:f2:05:81:
         40:74:9b:be:b3:04:ce:de:b9:1f:23:32:7b:e3:ea:c4:04:5a:
         89:7f:0c:55:8f:3d:24:39:43:78:fc:e0:d6:14:7d:77:51:f5:
         f7:b7:ee:8c:10:29:d4:51:08:a1:74:9c:c9:59:6a:48:5f:f1:
         97:b3:b6:c5:6c:cd:43:38:f9:49:c3:d9:df:f9:3c:6b:51:1b:
         d4:38:38:6d:89:af:60:e6:69:88:94:6f:cc:6e:aa:09:c3:bd:
         75:6a:f6:c1:8b:c4:d1:a5:b9:b2:c2:70:49:c8:ea:d5:5b:84:
         80:f2:6b:c4:da:39:52:5b:67:3d:38:c7:2e:30:d9:3d:ca:1d:
         01:85:09:13:75:56:5e:37:ab:ef:8f:f7:1e:23:fb:fe:b7:26:
         1e:88:94:8e:36:7d:44:14:5f:ff:66:8d:a5:53:d3:b6:9c:6e:
         99:27:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:50:33 2024 by rpki-client on console-ams.rpki-client.org