Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa
File:                     3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa (raw, json)
Hash identifier:          YgyzcK7B6YOLpchFRAAtVxY4lINCWBsOuqkKykvrJXw=
Subject key identifier:   48:B5:DB:B5:5A:BF:BC:CF:E4:2D:52:4E:06:48:01:E2:36:83:3A:2D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584538AD42CAA6ABA8050904F980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        209.53.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:42:ca:a6:ab:a8:05:09:04:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=e62389cb-d723-4821-9e41-f7b7feca7aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:58:3e:d8:c1:02:29:fc:ee:bb:a8:73:d2:
                    0c:a9:61:fb:6f:d0:84:46:53:17:4e:bf:47:25:0b:
                    61:03:60:22:d1:6c:dd:ef:e6:fb:3b:92:ed:99:43:
                    8e:35:f8:54:44:cf:a2:13:61:14:e9:92:31:27:92:
                    55:0d:21:9e:77:6f:24:4c:1b:9d:cc:f2:82:fd:72:
                    62:13:19:52:5f:dd:f4:90:81:b2:4d:df:1f:4d:5b:
                    a9:c9:ff:d9:85:1a:4e:4d:51:de:f6:73:99:78:17:
                    24:86:79:65:4f:4e:3a:2f:f0:3b:40:0a:95:1c:44:
                    a2:6d:06:10:e3:b6:42:e4:c1:ec:9e:6c:24:37:91:
                    9d:68:b2:ee:1c:2d:a2:2d:0e:2f:76:0e:d1:f1:47:
                    7f:a8:03:bf:f9:a7:c3:82:30:4c:4d:20:14:5e:a4:
                    ba:3a:04:e1:7d:b0:e6:79:1c:72:5d:26:de:d4:78:
                    d0:07:f2:cc:9f:e4:c2:90:5b:cb:34:14:91:77:cc:
                    09:6a:a6:00:53:a5:96:62:27:4c:54:6b:cf:c8:28:
                    75:43:9d:fe:d8:6e:a9:c6:9b:af:b0:c2:99:f1:00:
                    5a:41:ec:07:5b:fa:7f:c0:a9:4c:c4:1d:21:eb:32:
                    13:46:77:11:35:db:e6:9b:34:1b:09:86:18:8d:1d:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B5:DB:B5:5A:BF:BC:CF:E4:2D:52:4E:06:48:01:E2:36:83:3A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:55:4a:aa:04:d0:e6:38:07:dc:07:48:d8:72:8c:82:1b:
         6f:63:20:11:1d:ef:20:f4:4a:fd:58:83:53:96:66:d9:58:2a:
         39:f6:dc:38:65:76:78:e5:2f:85:57:7d:68:fc:b9:3a:d2:b1:
         ac:63:0c:6d:8e:5a:80:86:40:96:82:4c:c2:c4:30:26:9a:67:
         51:2c:71:28:b1:c6:e3:99:10:ac:f6:92:59:65:37:d6:3e:e9:
         e7:3f:de:ac:12:50:30:9f:1f:97:09:77:cf:c5:21:a1:c0:14:
         01:85:c1:44:ed:47:79:16:8f:36:e4:48:2f:b7:59:73:21:4d:
         7f:43:d4:2b:94:85:09:13:45:a7:53:df:5f:e0:3d:f3:0c:15:
         95:f2:13:1e:fd:d5:0d:ed:02:ce:3f:6a:6a:a8:ab:14:e1:fd:
         01:e1:e5:e7:58:c3:d9:5e:49:73:0c:95:34:36:b0:99:bd:b3:
         ac:d3:86:d0:23:d8:39:a4:01:61:31:d2:1a:a1:07:2d:33:c8:
         1f:fc:bb:e6:9e:2a:1c:4a:51:12:df:31:01:e3:ad:ec:8c:42:
         38:4a:71:68:41:f6:4f:ba:9c:b2:9f:77:23:a6:e3:af:7c:32:
         97:77:7e:3a:39:1c:35:67:fd:04:73:33:f6:7f:3c:92:8f:5f:
         04:7a:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:30 2024 by rpki-client on console-fra.rpki-client.org