Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
File:                     7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa (raw, json)
Hash identifier:          5QSrnF3BJBf02BqBPW9Km0LHuWmhofK5DXcN/EhDXsc=
Subject key identifier:   3A:AC:AA:B4:50:78:AE:C3:92:86:42:2A:99:17:3D:5E:62:AC:28:4A
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845ADEDFED3825469EB6EAFEE00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     15313
IP address blocks:        147.124.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ed:fe:d3:82:54:69:eb:6e:af:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=2bc1ccd9-2088-4ca0-8f92-fa58ec08ebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:c9:05:47:2d:6b:51:56:f5:54:eb:9d:9a:
                    25:d2:71:2f:20:f7:61:e9:3d:4c:eb:dd:28:00:a1:
                    ce:83:b3:bf:de:e3:ec:30:55:ab:10:8e:a7:ed:03:
                    dd:29:e8:19:38:5c:11:71:db:52:37:7a:7d:5a:af:
                    27:9c:fb:d8:46:ae:e5:ab:95:81:55:82:99:b9:36:
                    cd:e6:b7:0e:a0:cd:4c:06:fe:54:28:ff:1e:28:56:
                    82:c1:11:54:8b:f9:5b:61:a4:eb:62:be:01:97:6d:
                    af:a6:2b:0c:a9:22:d7:d2:68:7d:95:75:8d:f8:d5:
                    f2:7a:87:13:49:5e:e4:9c:d4:43:2a:ef:d4:6d:a2:
                    cd:77:c7:c7:ca:77:9a:5d:bb:09:e6:d4:9d:d8:f8:
                    50:28:eb:c0:45:36:10:e1:f6:d0:52:6a:3c:ec:9e:
                    30:bf:e7:93:39:26:90:48:6a:ef:0b:8e:8c:10:3e:
                    26:0e:ae:04:ed:d9:ba:57:b8:14:17:e9:a4:b2:d9:
                    6b:23:fd:70:fa:98:e8:7a:7f:bc:a6:08:40:a6:ad:
                    ab:7e:1e:39:0f:13:4d:27:20:aa:5d:a8:30:4b:d6:
                    c5:88:05:ec:26:08:a6:42:ac:0f:a5:f8:18:6f:0e:
                    46:bc:22:cc:3a:cd:46:0e:b5:ff:9a:88:b8:b6:d6:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:AA:B4:50:78:AE:C3:92:86:42:2A:99:17:3D:5E:62:AC:28:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c7:f4:07:8b:08:3c:81:30:e1:2a:c2:80:16:8e:ef:bd:c9:
         b5:bf:cf:c0:79:67:58:1f:60:72:96:33:e2:31:63:ca:31:d2:
         59:65:29:28:c0:53:e1:bf:1e:63:8f:a9:61:1d:fc:95:99:59:
         c5:20:6a:53:2d:b3:87:a9:53:88:4b:98:93:1d:ba:50:5b:6a:
         c5:c9:ad:94:55:34:7c:80:54:fb:c1:ee:f6:a3:77:d1:4e:b8:
         53:a9:11:92:e7:38:a1:6b:2c:8f:c4:ed:14:be:2f:ae:d3:23:
         38:57:a0:4b:19:b5:47:f0:df:7d:79:b9:28:64:c1:5e:d9:5f:
         71:d3:20:84:ec:03:65:b0:f6:00:db:14:e5:5c:6a:df:cb:6c:
         34:cb:b6:cf:c0:e6:40:d8:9b:c4:a6:48:85:da:cd:2a:9c:7b:
         20:2b:04:dd:b6:54:64:21:fd:17:ef:70:b3:56:41:72:a3:54:
         bc:a9:ff:57:6c:79:09:f2:a5:83:fd:fb:b4:b2:59:d6:cc:e8:
         90:35:d4:c3:92:51:46:a0:17:de:c2:7c:b0:de:8c:77:e6:e7:
         3d:e9:10:0a:b4:3d:9b:59:ac:32:59:d3:78:cb:ab:85:33:8f:
         6e:ef:bb:e5:84:23:e7:b9:de:d1:b3:a4:b8:5a:91:fa:07:b7:
         8b:4b:df:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:47 2024 by rpki-client on console-fra.rpki-client.org