Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa
File:                     43286a4b-a24d-381e-be5f-4712d31e0324.roa (raw, json)
Hash identifier:          ktJs6SaYKOP4Cm0g+r70Zst9lvrT4yz7Lg8npxK9j0g=
Subject key identifier:   91:8E:E6:F1:72:40:CD:CA:31:37:B9:FF:3E:B1:57:73:55:D0:23:B9
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285845E45E86A0D710460B30241CD0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     12083
IP address blocks:        207.98.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:86:a0:d7:10:46:0b:30:24:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=cd5b98cb-068b-41e8-8056-e3235c067ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:9c:0b:bb:78:b1:a1:6c:85:c0:d7:de:25:
                    a4:bc:b6:e8:95:b2:8e:4f:70:a4:50:e5:d8:95:86:
                    7a:03:5f:a4:35:7d:66:57:22:6a:b4:6c:e7:77:3b:
                    a5:2f:0f:74:9f:2d:0f:4b:54:2e:ce:48:c5:20:2a:
                    51:aa:de:59:67:e0:69:9b:b9:c9:ef:76:74:b6:44:
                    d6:e2:10:08:00:e1:09:01:ac:eb:ba:7d:ae:02:f5:
                    27:de:11:80:2e:7a:2a:52:91:5a:ba:f4:3b:1a:9b:
                    c1:00:b7:3e:8e:0f:7b:47:55:a2:8a:6d:6e:1f:dc:
                    b6:04:de:de:c7:9b:b6:9f:31:55:72:b0:16:3e:ca:
                    6a:e0:94:ab:88:81:49:e9:d5:c9:1c:b9:38:59:ae:
                    a6:2d:b1:e0:98:3f:21:ce:61:e9:6e:fa:9f:53:f4:
                    32:5c:72:d9:2f:ab:02:1f:12:7d:6c:52:f0:62:b4:
                    58:39:d2:da:43:8a:4a:aa:17:4c:ba:71:af:16:e2:
                    4a:cc:0f:79:20:42:7a:f4:3b:1d:f9:be:24:f3:8c:
                    b6:12:f8:2d:a5:e7:c2:4f:dc:6d:2c:1a:e4:ee:c3:
                    c6:6d:95:fa:d5:ee:26:dd:14:6f:6a:be:3e:09:0e:
                    65:52:52:d4:70:02:b4:05:a4:74:e1:86:4f:d8:b2:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8E:E6:F1:72:40:CD:CA:31:37:B9:FF:3E:B1:57:73:55:D0:23:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/43286a4b-a24d-381e-be5f-4712d31e0324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.98.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:81:d7:38:93:7b:f0:22:09:4c:f8:61:f0:9f:36:99:ee:49:
         30:6c:a4:05:46:7c:c1:6c:7f:b3:7e:73:58:dc:a4:d1:70:78:
         94:dd:10:3f:70:6d:b8:c9:e6:25:f7:e4:7b:79:af:9c:87:32:
         ae:fe:1f:e6:ea:2e:79:5e:bb:6c:5e:05:27:26:ba:25:d9:93:
         ca:9c:08:50:67:a3:62:5e:6f:e0:82:7f:e2:d5:db:7f:d8:37:
         f1:76:a9:fe:79:5f:78:6f:32:53:ed:90:9b:c0:73:fb:bc:f4:
         fd:3e:bf:d5:2d:78:57:31:2e:a5:98:3a:ac:4b:54:38:1d:73:
         c9:aa:58:fa:57:67:6d:5c:cc:50:0c:0b:a5:77:20:06:d7:f5:
         aa:7a:f9:5c:6c:05:cc:d3:b9:5b:f0:20:e4:2e:7b:be:cc:7d:
         4c:fe:60:a2:69:05:79:84:14:c1:cc:ce:94:fd:26:9d:7a:fb:
         ce:bd:16:15:cb:1d:8c:ec:a8:c5:77:6e:ce:09:66:95:55:86:
         39:b8:ea:3d:a8:5a:be:1c:c8:40:2e:bd:3b:75:94:7c:fb:32:
         19:00:f9:fb:ec:43:7a:c0:19:a8:7e:f3:aa:a0:65:5f:08:a1:
         75:b5:89:fe:52:27:ae:f4:b4:79:8b:3a:c6:69:78:0a:bd:f6:
         84:ef:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:39:29 2024 by rpki-client on console-ams.rpki-client.org