Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/c827302b-90a8-3c74-a381-a54a20fb26e0.roa
File:                     c827302b-90a8-3c74-a381-a54a20fb26e0.roa (raw, json)
Hash identifier:          vUbMROZglh5jZsLIX1xlGqMzcvl7HlOQ4wQSJP6ik+g=
Subject key identifier:   45:85:85:F9:C9:36:B6:F9:88:EA:C5:40:A1:66:53:43:D0:73:94:1D
Certificate issuer:       /CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
Certificate serial:       010D0C9F43285845A15E1A2233CEB273470E8E00
Authority key identifier: E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/c827302b-90a8-3c74-a381-a54a20fb26e0.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     27268
IP address blocks:        140.106.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1a:22:33:ce:b2:73:47:0e:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=516695b1-ae65-4226-b1ea-85e97da4e86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:ca:77:0f:36:81:bb:b2:fc:77:9d:4e:cf:
                    dc:82:33:ad:52:3e:20:30:1b:ee:84:69:18:44:88:
                    a3:66:f1:56:09:bb:95:1c:ef:04:cd:1f:f7:b3:87:
                    5c:fe:d2:97:57:e0:b6:0c:8b:ed:de:81:85:27:09:
                    b6:94:89:6b:74:53:48:88:b4:36:21:15:81:43:e1:
                    8a:8f:f6:f3:01:51:f9:46:fb:de:1b:cb:7b:ac:f9:
                    68:7a:94:36:05:8a:8c:20:e5:16:df:6c:20:3d:ef:
                    26:b7:c2:81:32:8d:4e:03:fa:61:11:43:c1:9f:9d:
                    cf:bf:e5:55:a2:05:55:c6:0e:3f:cd:51:5a:a7:d9:
                    d1:1f:46:ac:b2:b6:7c:8a:ce:27:ca:6e:c1:af:da:
                    e4:7e:a5:16:81:b1:d2:88:3c:e5:fc:4c:f3:4b:cd:
                    a9:ce:2c:70:2e:29:08:e1:52:5f:f7:aa:5d:0d:64:
                    10:af:ba:24:7a:e8:dd:31:c8:e9:3f:80:af:e9:21:
                    d1:1e:6c:18:41:1f:f8:f4:06:a0:8b:31:9c:2f:49:
                    5f:2e:5a:b9:da:24:b7:cb:59:4e:c3:1c:9c:d2:75:
                    87:37:f5:e4:bc:41:f6:38:4f:f7:fc:e2:60:e4:41:
                    cc:ed:36:8d:cb:c1:8a:6d:cb:f8:c1:d4:81:10:d4:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:85:F9:C9:36:B6:F9:88:EA:C5:40:A1:66:53:43:D0:73:94:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/c827302b-90a8-3c74-a381-a54a20fb26e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:28:36:a4:78:a9:42:d5:59:7e:75:63:84:b1:84:46:fa:65:
         0f:72:9e:40:de:b4:df:27:51:e4:31:fc:92:6d:a0:c7:42:a9:
         1d:3f:3d:b5:83:15:d4:c9:0f:4a:1b:a3:d8:75:8a:5d:0e:0c:
         10:1f:70:ea:8c:34:b5:dc:68:32:57:6a:91:6f:47:11:e7:69:
         ec:61:42:61:89:ab:88:10:6c:4e:5c:23:9b:df:74:03:d2:5a:
         4a:bd:55:a4:d0:11:bd:6a:d6:26:cb:70:1f:ba:51:00:ab:bf:
         14:91:87:69:73:b4:81:f0:16:61:04:ad:3a:bc:95:24:1a:0b:
         95:4c:a1:66:2c:c6:94:c0:5c:0e:3f:d4:12:93:21:b6:59:81:
         dc:a5:1b:a4:f0:d6:6f:83:23:af:c3:d7:61:71:0b:e4:61:51:
         31:1f:bc:01:d4:41:91:82:17:15:26:9b:2a:f3:1c:89:d2:57:
         85:d1:93:7f:b8:52:e7:82:42:0c:e6:31:1b:57:55:37:05:5c:
         8d:ce:8d:9a:62:0e:7a:ba:bc:77:47:42:10:e3:2e:23:ab:10:
         8a:98:60:81:86:b3:ca:c1:cb:db:ec:91:ef:58:b6:81:6f:ac:
         24:7f:f5:7b:29:61:59:94:74:4e:f6:a7:95:c7:e1:cb:19:9a:
         59:f6:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:02 2024 by rpki-client on console-ams.rpki-client.org