Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a8c7205c-9b55-3072-bcd5-4099e6b30118.roa
File:                     a8c7205c-9b55-3072-bcd5-4099e6b30118.roa (raw, json)
Hash identifier:          ctCCtzmmZw7uD76EAIUMOZhWANAVSFGtsoNRmF781GY=
Subject key identifier:   F3:20:D2:64:42:50:33:AD:45:A8:2D:4C:04:30:0F:F9:97:C5:DF:AE
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DBBC093FB7AD0DA707500
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a8c7205c-9b55-3072-bcd5-4099e6b30118.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        208.123.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bb:c0:93:fb:7a:d0:da:70:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=2a4829eb-a7f1-4319-9f8a-eed7b3e66696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:92:f0:35:30:dd:96:90:fa:89:cd:d6:0b:
                    c0:fa:5e:76:20:90:53:43:63:f3:7f:87:9e:17:f7:
                    e8:cc:c4:c1:bc:13:03:8d:bf:c0:ba:45:b8:1e:6c:
                    96:6a:36:31:8c:72:b6:2b:a1:30:3d:72:74:d9:e5:
                    dc:2c:86:eb:88:3f:d7:95:95:f4:42:c4:89:c6:72:
                    80:35:60:be:76:75:7e:9a:ac:33:02:d0:42:9a:03:
                    a3:83:3f:0e:8b:46:ed:51:01:a4:d8:fb:48:30:fd:
                    55:b5:99:19:a9:c5:dc:ef:64:1a:00:8a:af:9b:41:
                    ab:d4:6c:06:ee:6d:0f:b6:5b:49:bc:e2:f7:e6:f0:
                    d1:6c:72:2d:f3:a1:2b:ef:7a:01:c0:61:ee:8f:8b:
                    1d:fd:98:b3:e6:e3:90:99:61:1b:00:04:11:da:54:
                    7f:b9:48:fe:5b:7d:0c:14:77:b7:c0:ef:4e:64:c5:
                    e4:5e:43:3b:a5:12:0d:fe:a4:49:95:30:e9:53:6f:
                    ca:18:8a:c7:af:b4:40:7f:fc:e5:33:4d:65:06:ea:
                    f2:e9:1f:3c:f3:6c:35:45:de:f0:e1:05:cf:98:5d:
                    c5:1f:2a:e1:a7:db:0c:e6:45:8b:a2:6e:32:c5:1b:
                    c0:6d:48:f4:28:97:0d:e2:40:1f:d8:ef:36:2d:d2:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:20:D2:64:42:50:33:AD:45:A8:2D:4C:04:30:0F:F9:97:C5:DF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a8c7205c-9b55-3072-bcd5-4099e6b30118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:86:3a:52:d7:53:d1:82:f5:8f:13:a8:26:2f:ee:04:83:2e:
         d9:bf:8f:2a:a2:6d:63:2a:f1:76:ba:e9:ad:c8:c7:ae:0c:7d:
         39:b3:6c:72:76:8a:3f:ec:31:83:87:20:71:51:07:13:4b:b1:
         56:3e:89:f5:75:ae:2b:04:af:bc:95:20:d2:15:98:12:2c:3c:
         d7:47:ba:56:9b:77:ff:08:71:8f:12:ef:24:97:63:a4:62:48:
         27:40:70:41:15:fe:cd:8a:1f:33:c7:09:41:67:1c:f1:24:0b:
         2a:75:26:87:b3:27:90:59:6f:d0:00:fc:e9:ce:52:38:03:9c:
         1b:04:20:9a:cc:a0:8c:b6:d8:3a:6c:a0:96:dd:cf:e1:ff:73:
         1c:6b:4a:b8:be:25:bf:7c:12:4a:58:49:64:07:31:e0:cd:7d:
         24:a6:9c:85:8c:30:89:d3:23:ad:a5:e4:2c:15:d2:1e:52:bd:
         23:74:01:e8:64:e5:31:13:42:32:96:7f:e4:45:cc:e0:3b:40:
         e3:87:c9:23:c5:cd:de:4e:fa:de:3c:70:65:ec:94:47:06:1a:
         76:f5:1b:f8:ff:0d:e0:76:0f:c0:98:03:93:b3:fa:14:c2:1c:
         65:d1:fc:40:3c:7f:fc:92:18:96:fa:8e:bb:87:fc:ab:4a:2c:
         ae:5b:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:15 2024 by rpki-client on console-ams.rpki-client.org