Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa
File:                     969ccd84-0877-3f7d-8221-1da4e25df587.roa (raw, json)
Hash identifier:          8GSRGKcvBQRS/7jprM/0rOLrVv9QUOzso5wvYxcH+rM=
Subject key identifier:   28:DF:D0:16:07:9A:91:90:61:64:95:5A:67:03:D0:16:AD:E3:E2:EC
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285845A2C34A1F68DF23B5CD3AB7F8
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     26744
IP address blocks:        147.124.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:4a:1f:68:df:23:b5:cd:3a:b7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=b915efe9-6e12-4dbe-84a5-0ff6fb1a96e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:72:19:17:f4:64:ba:4a:12:05:5e:73:f7:
                    73:16:99:1b:11:ae:72:04:09:a0:32:5a:db:21:a3:
                    a7:75:b3:8c:66:94:b8:dc:b0:f8:f6:35:a8:74:63:
                    8b:3f:29:7e:3c:01:83:24:62:6b:32:05:3d:35:0e:
                    7a:ac:e5:07:18:bb:c0:8a:64:a6:31:43:c1:8e:dc:
                    7d:be:f3:4d:6c:2e:b5:8d:4b:cc:34:52:d2:94:89:
                    9c:c7:59:77:76:64:7d:7f:2f:d0:b3:c0:e7:62:60:
                    cc:36:56:c3:65:31:3b:48:72:48:06:94:ca:85:8a:
                    9b:09:33:49:17:c2:5a:88:cd:95:5f:8f:fe:fe:ff:
                    19:ab:d6:ec:ae:ff:44:29:5c:e7:b7:aa:9b:30:c0:
                    62:6e:1a:7d:81:18:86:58:9d:22:43:8b:1b:2d:8c:
                    38:86:1d:18:1b:85:63:a9:ed:a2:f1:2c:bd:4e:6e:
                    96:8f:2b:ad:1d:74:f4:83:b8:e9:12:57:0f:4a:fd:
                    c0:90:45:f9:5c:23:8a:4d:eb:81:55:a3:0a:e3:c2:
                    b6:68:37:82:92:26:b9:01:e4:4c:9f:0a:28:bf:9b:
                    b1:58:c9:17:7f:b9:a5:bf:a7:f1:2a:dc:2f:65:d8:
                    3a:94:26:4d:54:3b:93:c5:78:af:f2:41:d9:06:76:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:D0:16:07:9A:91:90:61:64:95:5A:67:03:D0:16:AD:E3:E2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/969ccd84-0877-3f7d-8221-1da4e25df587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:80:92:ab:f0:60:7b:49:ff:e1:7d:55:26:d0:1d:ad:55:
         14:3c:d2:e3:ed:8b:a9:14:52:ec:f4:c2:88:f8:2b:d6:39:8f:
         b4:c9:91:ba:06:6b:63:bf:4e:fb:98:5b:a9:17:36:f7:81:16:
         ce:8d:b2:21:f5:fa:da:36:7a:d8:ba:1e:63:1b:86:27:05:78:
         f7:77:5a:be:df:c3:ee:b7:93:a9:50:05:55:f5:82:97:c4:0f:
         57:a0:ac:a7:d4:0e:d7:ed:7e:de:9a:34:53:8c:39:d1:9c:b9:
         bf:1a:fe:eb:59:a1:3e:12:40:b5:7f:6e:b9:43:8e:9e:ab:00:
         d5:91:e5:e6:9d:51:ed:7b:05:53:69:82:e0:c4:3b:b1:74:00:
         73:51:80:89:f0:c9:d1:e5:00:29:c4:e9:c6:2b:75:64:ad:31:
         be:90:50:e4:9f:05:12:6c:02:5c:8f:a9:81:1c:e1:f3:2c:25:
         ed:85:a5:98:76:93:3e:60:11:c6:06:75:da:b3:4b:cb:f2:30:
         89:36:8f:85:43:d3:aa:0e:9d:e6:e5:ae:c2:1d:75:1e:ca:f6:
         13:10:75:85:91:13:ba:e4:8a:98:e3:20:95:0f:0a:42:55:54:
         3d:98:c5:f0:f8:64:c2:22:21:56:db:86:75:d7:5f:77:f8:b5:
         96:95:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:18 2024 by rpki-client on console-fra.rpki-client.org