Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa
File:                     ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa (raw, json)
Hash identifier:          Fcz2KyaCanKOWdFz61HCGGHT5MbOEFlSU5OmBQXOnKM=
Subject key identifier:   DA:74:7E:FA:CE:30:4F:49:6D:5F:52:3D:E2:DF:0B:DD:D0:F5:9B:32
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D8288B6B705DDEDCEB2A900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     21723
IP address blocks:        209.53.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:88:b6:b7:05:dd:ed:ce:b2:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=f2ca8eaa-b911-426c-a74c-90b3c184a62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:60:eb:35:7f:a7:dc:de:72:a9:ee:f7:3c:
                    e6:f2:3a:01:54:16:8c:8d:79:fe:a6:9d:6b:e1:30:
                    9c:5b:42:10:1a:46:79:35:f6:ea:a1:9e:3a:8c:1f:
                    1f:56:ac:6a:62:a6:bc:e8:26:35:35:86:b7:0a:ab:
                    b3:99:52:32:a2:04:c4:f0:68:75:3b:c2:f8:5c:58:
                    b1:2c:42:94:51:bd:78:96:17:62:99:79:37:1a:d2:
                    8c:47:eb:97:36:10:c7:6f:62:d0:24:2a:4d:7c:ca:
                    30:4b:43:68:e9:1b:a8:aa:98:bb:f2:f9:a0:27:09:
                    81:31:c7:d0:c8:5a:20:49:bc:75:5e:4b:9e:c6:6f:
                    0f:82:d0:ac:b7:64:e8:cb:38:ff:83:53:e3:2e:50:
                    f4:be:68:14:c0:66:c6:4c:4c:05:25:6a:a4:20:26:
                    9f:9c:1c:45:9a:5e:28:cb:2a:c5:39:f2:bd:d2:10:
                    7a:11:81:25:74:b7:10:d0:09:1e:99:aa:52:b0:c5:
                    4a:da:46:06:69:9c:52:54:b4:cb:d4:0c:53:6b:40:
                    a8:5f:86:9c:42:cc:af:44:df:ae:b8:c2:2d:99:ab:
                    75:9f:0e:3c:6e:10:75:f4:2b:51:d4:17:24:a5:1c:
                    73:32:c9:d3:04:26:29:58:63:25:d6:f6:02:ff:20:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:74:7E:FA:CE:30:4F:49:6D:5F:52:3D:E2:DF:0B:DD:D0:F5:9B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:d7:64:c4:0c:ed:69:67:6f:e9:f5:27:a8:6f:d3:64:5f:5d:
         e5:ab:ba:b2:a5:4b:c2:37:2b:4a:2c:b6:57:a3:16:c6:fd:9b:
         0f:4c:97:6d:74:6b:2a:2d:ba:a2:ce:34:51:f7:35:b5:42:6c:
         48:39:66:2f:af:61:50:df:d2:4b:ce:1b:68:ad:73:be:b0:2b:
         00:2a:ff:a0:20:a8:68:3a:d4:28:9f:07:eb:c7:08:fc:0b:ff:
         45:25:e9:11:fc:30:52:2a:b3:39:8d:d4:be:21:9c:26:14:05:
         df:17:d0:de:bf:72:78:f1:48:84:9b:ba:32:81:91:bb:88:ad:
         8e:de:f7:ed:5b:81:c8:9d:ad:22:24:29:bb:6a:a3:42:63:bf:
         79:01:9e:63:5b:1e:be:02:dc:bb:92:2b:f6:12:62:34:ec:04:
         f1:39:ee:c2:8d:0e:38:2f:06:b0:6b:2b:e6:ad:06:82:ff:86:
         f6:85:7b:8e:a8:83:52:5f:29:b1:11:fd:4b:d7:76:50:48:b2:
         54:2a:e8:e6:51:41:1b:9f:ac:4c:e3:58:a0:95:e4:72:76:bb:
         64:76:fe:b2:82:48:97:2b:62:1e:92:b3:78:0c:b2:bd:fc:c2:
         be:ed:47:85:46:91:24:bd:72:7e:6b:fd:0d:9b:bd:91:ea:12:
         76:0f:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:32 2024 by rpki-client on console-fra.rpki-client.org