Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
File:                     2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json)
Hash identifier:          uCWO0MZelgdX48kUZn+rFhdxcoW7z9F7fA7G/HZWgr0=
Subject key identifier:   CA:77:06:6C:35:7A:54:95:DD:E7:AC:EF:FC:5D:06:9B:87:58:81:88
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285844EA9FE897F1F9666488C17E00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     398202
IP address blocks:        209.178.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:e8:97:f1:f9:66:64:88:c1:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=636c933b-c19f-4029-bda3-331f47bfc916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ed:eb:e8:2e:6b:48:f3:01:a1:a5:a9:60:f4:
                    59:2b:71:86:1e:88:a1:97:4d:73:b8:9a:ee:31:b7:
                    c4:b8:e7:28:3a:7a:41:41:57:4e:e7:7a:ee:51:91:
                    0e:cd:43:ba:2e:f2:3c:30:ea:12:44:24:3b:90:ee:
                    90:a1:dd:00:52:ee:e4:f2:b9:51:ae:76:93:b0:ed:
                    42:1e:bc:91:d5:84:67:e5:34:aa:94:ee:e6:e9:49:
                    fc:55:2a:98:4c:13:e5:68:68:40:f2:c3:78:6a:67:
                    d7:d3:45:66:38:f2:2d:db:e2:4b:7f:d0:68:08:1d:
                    a1:39:67:38:ca:85:a1:95:3f:43:4b:20:76:51:ed:
                    f7:f4:2e:44:41:62:d1:dc:31:99:86:3e:18:35:6a:
                    15:d1:c2:92:fa:4a:75:f8:56:21:57:c8:aa:0a:8d:
                    3f:c9:92:50:04:f9:ea:77:8d:92:db:c4:d9:71:19:
                    8f:1b:45:5b:11:39:8e:ce:30:85:f8:c4:de:74:e4:
                    15:d2:75:5f:d8:27:aa:5a:10:61:39:81:4d:33:cc:
                    bc:1d:77:43:b5:b2:03:f1:98:3e:c5:bb:9b:a7:04:
                    aa:a6:fb:4b:5c:11:a4:2c:e7:fb:79:eb:49:62:75:
                    89:36:3a:0e:06:dc:c1:ae:d4:58:36:16:9b:42:6f:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:77:06:6C:35:7A:54:95:DD:E7:AC:EF:FC:5D:06:9B:87:58:81:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6e:c9:e4:04:e6:c5:e8:86:f2:e7:9d:71:60:65:16:26:a2:
         27:c5:3c:70:93:4d:a2:67:d6:0c:6e:69:a9:1c:b7:cd:15:1b:
         4b:0b:8f:62:48:53:75:6e:d2:32:f2:39:67:8d:d1:5f:d9:92:
         4d:0e:5a:a5:88:a4:27:ea:f0:86:e9:25:c3:8d:73:58:fa:03:
         87:3e:ca:2d:2d:7c:ad:6c:24:de:61:70:17:21:3b:fa:ca:5e:
         c7:c4:e4:ab:ac:04:9c:64:c5:0a:84:da:5c:97:b5:f6:c1:00:
         f6:cf:a0:2a:91:50:75:e5:6a:20:70:ea:11:a9:4c:60:4f:28:
         3e:d3:46:96:ae:ca:b0:16:0d:1a:91:a5:f0:aa:7e:37:f9:ec:
         6e:d8:cc:23:48:b5:17:61:88:e6:67:3f:60:d7:f7:a5:8d:53:
         c8:39:8f:c3:32:1f:5e:17:fa:73:0e:e2:48:82:36:8e:f6:57:
         45:9f:af:2e:48:cc:89:fa:04:b9:70:20:f2:1c:57:92:c0:a4:
         a1:c4:62:0d:e9:e1:cf:1c:dc:13:10:d5:3c:0b:0e:4a:6b:21:
         88:5d:4c:6f:fc:ab:8d:26:7b:48:80:dc:c8:e4:16:5f:00:3b:
         fe:44:38:6f:2d:82:26:fd:53:c1:c2:67:59:fd:2c:e1:9e:3c:
         ce:d9:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:50:44 2024 by rpki-client on console-fra.rpki-client.org