Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa
File:                     fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa (raw, json)
Hash identifier:          W/YcARnWEUnGA6gbPMEs1Bw+Fv3yc9rJaQXw9qd/IOA=
Subject key identifier:   E9:01:A0:24:1F:23:15:94:33:2E:28:9E:F6:C5:BC:C4:C8:F7:6F:58
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F432858458031BA0E9255866511C42600
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa
Signing time:             Wed 10 Apr 2024 15:49:44 +0000
ROA not before:           Wed 10 Apr 2024 15:49:44 +0000
ROA not after:            Tue 09 Jul 2024 15:49:44 +0000
asID:                     16904
IP address blocks:        209.237.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:31:ba:0e:92:55:86:65:11:c4:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr 10 15:49:44 2024 GMT
            Not After : Jul  9 15:49:44 2024 GMT
        Subject: CN=e350a781-6846-4530-8d7c-a2973e4e3dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:b2:21:cb:10:c2:a8:b7:60:fe:53:42:ab:
                    61:53:2d:4c:b8:2b:2d:69:da:74:85:6c:57:5c:14:
                    3c:c7:83:ec:87:7d:2e:00:28:e3:e0:fa:b0:e0:2e:
                    ad:22:56:43:39:25:ce:2d:0c:b3:36:42:8c:65:4c:
                    73:42:04:2f:81:87:44:88:fc:e3:dd:ce:8f:ea:12:
                    3b:fb:4a:44:a7:b7:b2:7e:38:35:79:c7:71:fd:db:
                    ff:6c:6d:78:e1:95:f0:1b:84:31:3f:15:14:db:8b:
                    39:b6:74:1c:07:72:a7:61:9e:19:f4:0e:b1:0c:c1:
                    1e:12:a6:ed:b8:80:fd:22:bc:8d:c6:07:bb:ee:8c:
                    82:ac:51:b7:2c:c6:39:7d:8e:87:64:cb:b5:0b:f4:
                    9d:f8:22:5d:e9:cb:b3:72:e2:49:86:ef:00:8e:ab:
                    59:3c:0d:84:a6:13:af:0a:bb:da:3a:8d:f0:a5:d4:
                    16:69:cd:5a:4a:ce:8a:26:31:c8:8e:50:09:29:8e:
                    6a:e0:f8:0c:c4:cc:61:aa:88:3e:6d:d9:f1:9b:07:
                    8b:a4:fd:6d:30:c0:f9:73:99:02:8b:da:8d:2f:0b:
                    d0:1b:28:e2:6d:e4:cd:85:eb:98:a1:5d:4b:f5:61:
                    6a:b2:80:2c:ea:b7:b8:9d:65:54:68:50:94:ce:af:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:A0:24:1F:23:15:94:33:2E:28:9E:F6:C5:BC:C4:C8:F7:6F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fb868ad7-a036-3451-bc20-5cd7cdc8d7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:c0:ed:cb:1e:ea:e8:6a:23:8c:e7:11:ea:25:8d:3d:94:
         ce:14:95:a3:f3:04:64:d0:49:49:88:df:fe:85:e1:da:61:82:
         52:4c:3b:38:1e:df:cd:7f:96:a7:cc:cd:ee:df:2c:67:fa:4e:
         83:c8:4d:37:fd:05:27:a1:e4:31:f5:0b:c6:91:42:00:6a:be:
         16:fb:99:63:47:77:05:e7:8e:74:20:31:47:6d:cf:96:da:cc:
         d1:2a:e5:c5:8d:a9:b7:d1:b7:f4:b5:be:ec:b6:e4:62:a2:2c:
         d1:c3:da:f1:d6:87:61:46:40:ca:66:62:c2:eb:04:28:78:0c:
         6c:2c:27:ff:7f:34:20:77:06:3e:4a:7c:29:da:30:2d:9f:53:
         2f:95:a2:dc:78:91:e6:12:53:e7:c5:d4:45:b4:68:9c:1d:83:
         f3:97:18:60:07:44:ec:a0:86:f6:21:75:12:95:3a:d6:5f:6e:
         7d:f1:5d:ce:6d:96:f4:41:0b:22:95:4e:c9:d0:60:40:81:ae:
         68:89:7b:19:2e:0c:23:5b:e3:a7:db:51:d7:37:f7:10:2e:67:
         28:c6:b3:8d:22:61:3e:0b:00:be:e8:fa:60:69:a5:6c:b0:22:
         22:65:04:f9:54:dd:b5:b0:40:31:08:ef:1c:9a:57:b1:9b:79:
         b6:d3:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:26:56 2024 by rpki-client on console-fra.rpki-client.org