Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
File:                     7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json)
Hash identifier:          eguNPTMInEcDvlvNT17q7sLNAi8Uc+cYZuh/jpjiLb0=
Subject key identifier:   3A:DE:F8:DE:FA:B0:F4:36:97:C8:09:D9:80:CE:86:62:04:AE:95:31
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285846330EA2338D6663951F12EB00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
Signing time:             Thu 13 Jun 2024 17:28:43 +0000
ROA not before:           Thu 13 Jun 2024 17:28:43 +0000
ROA not after:            Wed 11 Sep 2024 17:28:43 +0000
asID:                     25645
IP address blocks:        137.239.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:0e:a2:33:8d:66:63:95:1f:12:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun 13 17:28:43 2024 GMT
            Not After : Sep 11 17:28:43 2024 GMT
        Subject: CN=e2e3e377-e973-44d9-8fca-a4947eaf3de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:3b:ae:ab:a2:e0:f7:5b:3b:8a:92:b6:3a:
                    e4:6e:98:de:3c:f7:a4:8c:81:93:1c:c3:ac:f7:b9:
                    89:b1:85:a8:4b:51:2f:d1:4f:c4:b1:59:3b:d4:d6:
                    06:77:76:65:85:0b:ba:be:52:fd:07:d1:27:1c:57:
                    1f:96:d9:e1:d9:f1:1c:86:c3:0a:fa:32:00:1f:28:
                    e6:44:84:c3:a0:42:c2:c5:7f:ba:8b:51:4a:90:71:
                    dd:3f:1d:41:08:ee:c8:12:35:8a:98:4f:de:7b:e0:
                    fb:93:a2:5d:ef:0e:6a:82:79:3e:97:4d:7e:0d:b4:
                    a1:77:16:2a:8c:c2:32:fe:fc:34:c8:69:24:15:5e:
                    0c:30:2b:73:b4:af:66:c2:65:a4:16:25:8d:1d:cf:
                    89:4a:3e:d7:bf:3e:63:e1:3b:1d:7a:ac:40:14:f0:
                    c6:a7:84:a9:bf:92:64:b0:01:0a:9e:3f:cb:0b:9b:
                    9a:03:46:6c:4e:da:cd:35:2e:81:e1:bd:50:8c:85:
                    82:51:45:d3:70:34:ae:ce:39:e0:b0:4d:f4:dc:7c:
                    a3:da:d9:3d:a0:6e:2b:b4:82:bb:a5:8c:fe:7e:43:
                    49:c8:67:1e:95:bd:51:c5:13:3f:9e:e2:c3:d6:7e:
                    3f:16:eb:dd:d7:2c:40:1f:2c:17:8d:ff:ef:f7:f1:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:F8:DE:FA:B0:F4:36:97:C8:09:D9:80:CE:86:62:04:AE:95:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:18:f8:22:35:04:d5:b6:d8:f6:54:2e:29:23:bd:42:69:
         7c:5a:be:fa:de:f3:25:30:87:8a:57:68:bf:ae:9b:e6:9c:24:
         09:95:cb:e2:db:a2:9a:47:36:a2:85:5b:37:6a:af:64:f7:ec:
         63:47:33:7c:69:2e:40:78:ec:30:97:63:1d:d8:ec:08:a9:82:
         12:5e:66:98:12:1b:75:6e:67:42:e8:0b:93:fa:6a:99:fe:63:
         29:62:8b:73:c8:f8:b3:9d:9e:3c:82:23:49:1b:dc:68:f9:55:
         ee:14:4a:59:b3:85:1e:0b:18:4d:46:fc:87:90:4e:9a:68:14:
         35:56:dd:2a:00:17:7d:82:48:75:a8:bc:f5:00:89:7a:17:29:
         b9:3b:a5:9f:80:50:f6:c3:2e:43:d0:cf:d7:cb:1b:c3:cb:eb:
         13:49:02:9a:bc:9f:cb:1f:39:56:85:5a:9f:2f:26:fb:fb:3d:
         1d:85:e2:3a:9c:11:17:0a:d4:a3:66:50:3a:7f:94:3c:41:5d:
         56:37:a5:97:e5:03:4c:f3:36:32:30:dd:c3:99:6c:d6:df:05:
         0b:e2:2d:a9:59:a8:f6:66:2c:67:c1:f9:f3:93:22:16:93:83:
         45:89:42:a3:48:2d:e9:db:77:f7:0f:ed:cb:e2:8b:e8:ed:e0:
         6f:56:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:15:23 2024 by rpki-client on console-fra.rpki-client.org