Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/910ae9f5-67b3-3386-8003-7e5018cd6769.roa
File:                     910ae9f5-67b3-3386-8003-7e5018cd6769.roa (raw, json)
Hash identifier:          yEo+NY5cCe+QoiyDLk75M+bDu9Lm6EHjesuUE9d7RCA=
Subject key identifier:   B7:CC:18:DA:15:EC:4D:47:29:C3:61:6B:A5:70:BE:42:9D:52:AF:9F
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285844ED6A9F93B06FC0C3B6DCFB40
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/910ae9f5-67b3-3386-8003-7e5018cd6769.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     58931
IP address blocks:        107.151.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:9f:93:b0:6f:c0:c3:b6:dc:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=a65bd9e2-8f81-45d4-b3bc-faa6c6afe7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:04:d6:7a:16:6b:4e:49:39:45:44:ff:9b:7d:
                    bb:5c:d1:2c:38:3a:61:60:67:0c:49:18:30:bb:4b:
                    4c:4e:4a:b6:05:5c:c9:c9:28:ef:ff:96:1d:e6:4a:
                    2a:cd:56:2e:1b:f0:56:13:b0:2b:9b:42:1b:95:f1:
                    71:b1:8d:87:9e:91:15:07:dc:e3:12:11:a5:10:38:
                    c0:a7:2c:94:f5:70:74:19:f9:8b:82:6b:9a:57:16:
                    eb:98:58:88:b4:bd:f9:25:b8:61:69:c4:28:d5:07:
                    eb:cc:70:4e:63:82:72:79:e8:6d:21:96:a1:ff:b1:
                    dc:e4:2b:ce:a3:23:bc:d9:dc:29:ef:6a:9a:c7:77:
                    b9:c5:6c:e7:66:87:86:a3:e6:6a:12:55:34:82:e1:
                    98:f8:00:1b:a6:64:b9:b9:8a:a7:98:01:51:23:1d:
                    b4:c4:29:ce:7b:3a:ab:f8:5b:99:59:23:82:57:08:
                    ed:3c:89:ca:9e:e3:a9:e0:02:c5:05:7d:b5:1d:ff:
                    d6:f1:d2:0c:07:d8:2b:8d:d7:1e:45:97:81:c6:0a:
                    56:ee:ce:25:b4:be:22:62:11:3e:57:32:a3:22:6d:
                    5e:5a:ac:28:9b:51:3b:47:7e:61:34:97:ae:b5:4f:
                    42:bd:24:9a:81:90:a0:9f:cf:6d:73:14:c8:aa:87:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:18:DA:15:EC:4D:47:29:C3:61:6B:A5:70:BE:42:9D:52:AF:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/910ae9f5-67b3-3386-8003-7e5018cd6769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1a:91:85:8d:95:10:92:02:30:03:42:86:cf:e2:ba:13:ef:
         3b:8d:9f:ee:c0:34:06:ff:c5:d1:d0:06:e7:5c:d7:dc:83:7d:
         93:a7:aa:9f:dc:e8:af:06:2f:0c:86:8d:5e:4f:77:63:35:12:
         6d:e9:cb:63:9d:b2:9c:d6:e6:82:d9:82:3b:28:45:66:f2:2d:
         1a:fd:59:fa:fd:82:5f:55:6e:1d:8b:13:d9:54:fb:ae:dc:36:
         f4:fa:e6:4b:ce:93:db:d9:f4:1a:8f:3a:03:9e:f5:be:a9:e4:
         09:e4:e7:eb:0a:f2:65:fa:9a:c7:1c:a9:7e:70:c9:44:81:71:
         69:da:08:af:53:d0:47:91:dc:0e:96:e1:6a:e0:9f:11:b2:18:
         0b:51:24:08:5b:02:c2:0b:04:f6:cc:5a:37:7b:a7:ac:28:b4:
         51:56:e2:a1:8d:93:70:d9:17:cc:f0:bf:06:6c:2a:9c:18:7c:
         e0:5d:b2:f2:e2:63:f1:58:75:5e:57:e3:a4:7f:53:5f:89:bd:
         95:9c:96:7a:ac:f7:c6:10:e4:9a:7e:93:c5:19:aa:ef:d8:d4:
         e5:40:c1:bf:dd:aa:d4:2d:f4:35:df:7f:93:0a:a5:47:8b:dc:
         eb:17:33:79:0c:d1:d6:0b:72:9c:21:b8:c0:30:d5:f3:a6:13:
         51:30:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:26:09 2024 by rpki-client on console-ams.rpki-client.org