Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          RGC+58UcJSklkpsJvoAjinlnAWWOlu2HFM8sXpgHp0w=
Subject key identifier:   B1:E2:7B:58:CB:03:24:00:2E:B5:9C:93:9A:3C:3E:29:9D:F9:5D:24
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F4328584561286D0775EA458F6C05B680
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6d:07:75:ea:45:8f:6c:05:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=02056ab4-17a5-4be0-8e43-06a838b62147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:9e:d8:2f:1f:29:a5:5c:79:64:93:8f:da:
                    90:ff:a8:41:7e:a9:cd:b8:cd:f2:8d:6b:dd:a3:e9:
                    d6:ea:13:11:dc:46:67:40:e9:d0:f6:c2:82:36:16:
                    d9:cc:4f:7a:9f:c8:2f:0a:ac:90:1f:76:af:bb:6c:
                    93:00:13:a1:a1:98:f2:64:be:87:82:64:69:11:c7:
                    75:dd:c2:c8:55:54:10:a8:d2:70:75:f0:27:a6:03:
                    1c:f8:31:8d:96:59:b6:77:2a:e8:35:03:e8:19:49:
                    9e:e4:28:41:49:51:44:e1:67:0c:6a:0f:a1:63:e7:
                    ee:06:f1:50:2d:fa:23:91:a1:11:24:f3:85:bd:f3:
                    b9:d2:66:1c:2b:26:eb:c7:53:11:22:2a:ee:5e:d6:
                    4d:c3:d5:10:4f:29:44:99:81:40:05:bd:c4:0d:ab:
                    ae:f0:1a:23:a4:d5:87:b7:1c:7c:f3:d7:24:98:96:
                    9e:1c:4a:cf:25:9b:5e:e4:22:2c:e2:6b:5e:6c:3c:
                    2a:d4:4b:1d:8b:40:81:17:fb:e5:b1:3f:df:4a:10:
                    bf:ee:d5:08:92:3f:11:02:22:f3:ed:06:e7:ee:79:
                    97:6e:48:2f:d3:26:de:da:1f:68:63:23:9d:0e:c5:
                    16:54:83:9a:8d:e6:62:73:3a:2a:0a:d8:c4:d6:58:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:7B:58:CB:03:24:00:2E:B5:9C:93:9A:3C:3E:29:9D:F9:5D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:6a:13:82:48:7e:6f:8e:1a:af:37:9c:c4:c4:7c:3f:75:
         5d:b4:9c:9f:db:b4:60:43:3a:79:92:42:03:ce:d8:c8:13:7c:
         02:06:e2:77:64:7d:b6:70:65:a3:93:21:5a:4d:63:1a:e3:2b:
         71:c7:01:71:64:87:1d:37:d1:ff:b0:f6:4b:71:ff:55:8a:2e:
         73:67:7e:99:c6:00:e9:b2:3a:95:d6:3f:d5:6a:4a:72:2f:13:
         6c:61:b3:b7:d9:ce:f3:c3:4c:c0:11:7c:84:15:f6:7a:60:bc:
         e9:6c:cb:92:47:32:b5:a9:24:59:23:37:4c:7f:7d:f9:1c:30:
         0a:20:27:1b:08:e9:91:46:3a:54:91:b9:20:01:8b:29:bf:e0:
         9b:b9:41:c3:c5:bb:94:90:73:2e:57:7e:a7:ad:2d:22:fc:b8:
         fb:51:5e:86:1e:dd:b6:ea:5d:28:b9:a1:0c:11:42:0d:ce:35:
         b2:a4:10:15:1f:a5:b0:d5:bb:98:53:20:5b:d6:57:3c:ad:8a:
         40:7b:4d:24:3d:b3:f2:a2:88:fa:3f:d7:65:6e:c1:66:1f:61:
         04:cc:f0:9f:b9:f4:cc:1c:6e:ce:f1:8e:27:c3:df:83:df:ac:
         82:88:62:36:75:aa:49:97:2c:fe:f7:a7:6b:90:3b:c5:f9:ee:
         ac:86:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org