Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa
File:                     85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa (raw, json)
Hash identifier:          pl/i3JWxufS5OqXFy8faXKMlyaKPxN0koCIFpNhwHGs=
Subject key identifier:   EE:16:B0:68:C3:2A:A2:67:26:3D:E7:AE:AC:13:82:AF:F7:ED:66:A8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584538AD46077C10E9DC4685FE50
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        207.102.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:46:07:7c:10:e9:dc:46:85:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=e8f837f5-5a7c-46fc-927e-a6501c3fa4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:ff:b5:39:fa:1b:c4:5c:d5:11:7b:bc:3b:
                    18:3d:95:74:eb:6f:54:13:c8:42:17:9e:b3:08:7a:
                    e3:11:3c:f7:cd:e4:a1:70:f3:d0:cd:6b:0b:60:6d:
                    1d:6d:82:81:73:fa:6e:15:12:b1:92:b0:b7:cf:4c:
                    65:eb:5b:8c:0f:da:84:c3:70:53:e5:46:08:86:2e:
                    fd:02:15:36:4e:c1:d9:58:6a:11:d8:c1:61:b2:ef:
                    6e:2a:8c:be:7c:50:62:56:c6:94:72:3f:1d:5d:a7:
                    ad:93:6d:7b:31:f4:4f:d3:a5:8d:01:fd:01:cc:08:
                    48:84:27:98:a3:d4:39:90:37:7d:6e:cb:e1:ed:41:
                    10:3a:46:cb:d8:c3:c1:fe:70:30:52:61:86:bc:60:
                    de:85:69:db:05:8d:2a:76:8d:de:73:bd:11:58:a7:
                    2e:8d:e9:39:95:49:37:ae:29:ca:f0:f1:a4:09:bd:
                    86:62:3a:1a:a3:ce:d6:df:03:a6:7a:cf:dd:53:7f:
                    e2:2b:aa:9d:3d:8c:b5:70:43:9a:94:0f:03:07:59:
                    4d:a0:24:8f:81:3e:57:19:db:01:b5:f8:1a:4e:67:
                    e3:29:65:4a:da:aa:5c:39:9f:11:b5:1b:ff:a3:fe:
                    4e:df:03:7e:0b:a7:fa:f0:ca:5f:e1:3c:53:1e:fd:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:B0:68:C3:2A:A2:67:26:3D:E7:AE:AC:13:82:AF:F7:ED:66:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:01:b4:5b:ec:82:43:b5:ec:43:a3:18:cf:e7:da:7b:e3:
         89:f7:10:95:31:da:37:50:7c:be:8c:49:bf:9e:4b:39:fa:5a:
         de:ce:54:10:13:42:eb:b0:d8:6f:3c:0d:c5:9c:a2:9c:a1:bc:
         d6:9e:d9:65:5c:72:34:d5:8d:c8:0d:9a:33:d4:0d:03:bd:57:
         79:7a:42:86:75:02:1f:eb:d4:71:80:0d:9a:95:79:38:47:cc:
         91:58:e8:60:87:fc:f3:af:a1:00:a9:b5:4f:28:94:ce:ca:aa:
         2d:0d:41:e1:2d:4f:e3:8d:b9:bc:2f:82:d4:13:c4:f3:94:a8:
         c5:93:46:2f:5c:0f:71:a7:d2:ab:da:f8:0c:29:fd:32:1d:04:
         59:30:86:4c:1b:93:97:bf:04:47:12:4d:07:b4:06:fe:5f:ed:
         62:53:71:8b:29:4a:71:ea:86:80:6b:25:d7:52:22:99:05:a3:
         01:cf:84:81:1e:a1:7f:2c:4f:cf:ca:e0:45:49:f2:50:3c:38:
         1e:8f:22:4c:7d:a2:ba:6c:9f:5a:f6:4a:a2:2e:22:47:6d:0e:
         ef:19:25:b8:05:e9:3d:d4:60:8f:19:0f:7f:f9:50:32:db:d1:
         88:df:62:ba:88:ab:f4:ee:cf:a9:78:8d:14:38:36:79:5d:74:
         2b:bf:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:31 2024 by rpki-client on console-fra.rpki-client.org