Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa
File:                     57a86509-535e-3f39-9aa9-5dafe9726ec5.roa (raw, json)
Hash identifier:          gvfh2sj2+9eUPwVSA1N4lnF3nBQI87iHOyTpeltDZQQ=
Subject key identifier:   E7:12:7F:DB:92:5D:C7:F0:3B:35:8E:07:2E:FF:88:C1:04:13:DF:E8
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847B696B36C4FC940C9547B47C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     62610
IP address blocks:        107.151.227.0/24 maxlen: 24
                          107.151.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b3:6c:4f:c9:40:c9:54:7b:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=906cf122-3b86-4766-8bd1-221ea10cd86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:18:c8:8d:4b:23:d3:7d:75:e7:a6:c4:0b:
                    70:36:ef:7d:8d:18:82:85:fd:88:1f:97:0b:f3:c4:
                    66:20:d8:b9:b1:6d:55:50:76:b0:2b:5e:d0:17:9c:
                    89:f1:b7:3b:74:43:7b:0d:67:66:79:aa:c0:df:84:
                    89:81:31:58:06:b4:0a:4c:4e:83:77:ea:e6:2d:1e:
                    51:5c:b2:2a:cb:8e:f0:10:7f:67:60:f8:2a:c8:4f:
                    4a:67:27:62:d6:63:06:80:0a:e2:d3:83:45:d1:ca:
                    d5:8f:7e:5e:10:df:ba:cd:b5:3f:f4:5b:e1:e0:1b:
                    0a:41:52:0c:fe:df:52:83:df:54:bc:7f:29:a1:f4:
                    e1:69:9e:e3:6d:d7:87:f6:36:1d:69:ec:50:5b:51:
                    01:87:da:e3:16:b0:c0:1e:55:91:95:f1:ba:e8:c7:
                    fb:f9:47:22:5b:08:ab:82:4b:b1:4d:60:95:37:87:
                    53:a8:50:9f:b0:69:59:47:9a:29:98:01:57:1c:92:
                    99:73:ef:61:e9:d7:f9:f5:9f:e8:43:bd:ed:1e:58:
                    6c:ce:ce:18:01:b3:b8:ea:09:b4:84:9f:b7:27:4c:
                    2c:db:20:ed:8f:3d:40:6e:6f:57:56:d4:eb:42:e9:
                    80:84:5f:06:1c:f4:79:99:6c:b2:38:73:ee:3b:55:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:12:7F:DB:92:5D:C7:F0:3B:35:8E:07:2E:FF:88:C1:04:13:DF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.227.0-107.151.228.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:0a:fd:82:74:98:98:ee:c1:ce:bc:24:10:3d:83:46:a4:
         76:55:7f:dc:06:4b:cd:3d:f1:a8:35:f8:3c:ec:16:fb:af:61:
         d4:e6:28:5e:9c:36:df:01:41:e0:b3:c6:94:0b:7c:d0:f0:c5:
         2f:be:39:b9:cb:d8:d2:b9:eb:bf:a0:d4:e5:f3:26:bd:1a:e1:
         e1:2c:7b:00:f9:94:0d:7b:e4:4d:c0:5d:cf:a4:08:1f:21:1b:
         54:ff:b8:c3:7f:bd:2f:50:c2:64:36:d6:51:25:e2:14:b2:b5:
         2f:9a:37:d1:97:18:b8:03:51:19:f2:98:f0:92:0d:cf:53:b4:
         a4:e5:02:59:f3:dc:0e:e0:be:16:10:15:e2:69:27:c9:77:43:
         fb:09:24:f7:be:2b:bd:f9:ea:75:26:e5:91:ce:9e:f2:6b:d5:
         01:8a:12:42:65:84:b6:72:bf:bc:28:95:a5:d4:ae:a3:d0:6c:
         f3:b1:9c:7c:e5:76:31:a2:88:8a:fe:79:1d:13:15:be:7d:d1:
         8f:fe:6f:90:b1:b7:5b:a3:37:79:e2:b2:c0:79:68:9a:86:38:
         ac:6d:7d:d5:5b:55:fa:16:d3:ab:32:32:d2:16:3d:48:10:43:
         50:f1:89:1c:8b:67:32:dd:b7:38:38:34:11:2b:05:3b:82:b7:
         d6:96:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org