Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa
File:                     62be329e-918d-352b-8f56-556c71bea741.roa (raw, json)
Hash identifier:          nmmNEcBDOoXNsi2mIJjaiasO1Q6RZSo0deytbeaOyYg=
Subject key identifier:   62:81:42:6D:2D:75:A9:9E:47:BB:31:63:04:96:43:02:77:29:14:57
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285845840DBB7E16FB7C30631C9920
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     57043
IP address blocks:        209.182.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bb:7e:16:fb:7c:30:63:1c:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=5a349414-8201-4781-a4ad-8aafff9b3096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:23:cf:e3:de:53:46:af:96:5f:05:42:39:
                    6e:73:0e:39:df:32:7c:c9:5d:b4:93:61:4b:45:7a:
                    3f:db:ba:e6:d6:1a:cc:77:d2:a5:21:74:e6:c1:a0:
                    d3:02:ef:13:31:09:50:31:86:eb:3b:c6:1e:b7:a6:
                    f8:93:8a:bc:36:7b:20:1a:34:7c:c1:20:29:91:44:
                    c8:86:de:fe:c4:f5:29:3c:9a:89:78:96:fd:47:04:
                    1a:27:ec:ae:0b:8b:75:42:5a:e8:1a:33:ca:7d:e9:
                    f9:d0:1e:be:9c:c9:90:77:38:db:58:53:46:ab:89:
                    23:27:50:d8:0c:ee:f3:9e:ff:de:16:26:d0:c1:d4:
                    1a:43:43:6a:16:dc:57:44:2e:6a:e9:d3:27:f9:bf:
                    6e:2a:3d:e6:fe:10:30:b4:ed:45:82:f4:e9:2a:bb:
                    f7:6e:ae:75:69:9a:22:fc:82:05:ff:45:d7:ea:c8:
                    62:3d:24:68:9f:8b:15:ff:1b:dd:63:8b:89:7f:64:
                    51:79:3e:86:d7:30:cc:03:ec:0f:03:f8:ba:58:1b:
                    51:09:84:a7:5e:a0:94:bd:03:41:8d:85:b4:22:4c:
                    05:d0:f0:27:ac:e9:0b:19:4e:cc:f2:40:19:b4:50:
                    4a:f1:ef:7e:79:ce:a8:b6:ab:1e:ae:4d:6e:fd:ce:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:42:6D:2D:75:A9:9E:47:BB:31:63:04:96:43:02:77:29:14:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/62be329e-918d-352b-8f56-556c71bea741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5e:fe:d6:9f:0c:92:0e:1e:b1:34:45:7c:8e:b2:ef:0c:c6:
         2e:fb:a7:24:5f:f6:8c:e0:64:ae:de:f3:5b:d2:d7:e0:fa:6c:
         0e:00:24:9e:4b:7c:82:3f:22:6a:b3:6c:a7:d2:e3:6d:ff:44:
         30:0b:e5:61:20:ff:b2:00:1e:86:d2:7d:82:c4:79:59:c9:c3:
         78:b1:c2:6c:b6:39:7a:b7:8c:8e:ed:0f:54:c0:b1:81:af:6f:
         fd:0b:60:44:dc:a9:cb:5a:83:b4:ea:10:d7:d4:6a:61:ff:a3:
         13:07:e8:6c:b4:ad:7d:59:42:7a:ab:b7:31:20:ba:31:92:7c:
         2d:26:65:89:e0:0d:a7:ad:4a:39:ea:ff:de:fc:8d:d6:bc:e2:
         df:05:16:77:89:eb:e5:1e:58:02:51:73:63:c2:19:d3:28:0d:
         d4:66:c1:7b:86:26:09:73:ab:d4:29:9d:42:e5:bb:35:e5:1f:
         3f:d4:02:b8:e3:00:8d:d1:45:de:83:aa:e4:41:98:0a:7f:c3:
         18:be:07:c2:b6:bc:c4:af:5f:ec:ec:50:df:7b:46:a5:cb:00:
         04:05:af:61:44:dc:1c:09:7c:9c:b6:e7:a5:46:5e:e7:33:54:
         06:5e:16:d5:b8:89:bd:e0:f2:5c:f8:e0:94:01:cd:1c:2c:ee:
         b7:22:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:48 2024 by rpki-client on console-ams.rpki-client.org