Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7f36626d-1591-331b-b518-62dcf6f97ca9.roa
File:                     7f36626d-1591-331b-b518-62dcf6f97ca9.roa (raw, json)
Hash identifier:          pKNkcnn6hfeVOaInDefYAK5+F2VZevAhX9QUtQDEgak=
Subject key identifier:   F6:76:67:4F:E1:2D:3F:BD:0A:4C:07:BA:FC:11:B7:41:A1:9E:3E:CF
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285844E059EEAE3D9B19A5CED6AE80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7f36626d-1591-331b-b518-62dcf6f97ca9.roa
Signing time:             Tue 13 Feb 2024 09:41:25 +0000
ROA not before:           Tue 13 Feb 2024 09:41:25 +0000
ROA not after:            Mon 13 May 2024 08:41:25 +0000
asID:                     57043
IP address blocks:        208.67.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:59:ee:ae:3d:9b:19:a5:ce:d6:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb 13 09:41:25 2024 GMT
            Not After : May 13 08:41:25 2024 GMT
        Subject: CN=67add05f-0b67-4ec3-b74e-5feffc2c825e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:b6:c9:b3:d1:8d:5b:b7:db:38:64:ec:07:
                    fd:6f:9b:4a:21:4a:93:96:01:c5:d2:f1:98:3f:86:
                    29:e6:1a:81:50:a1:72:50:a0:68:4f:21:37:31:c5:
                    dd:0c:46:bb:62:93:fa:88:b8:c3:3a:11:77:cc:24:
                    95:35:e4:13:01:fe:62:23:99:50:ff:a7:89:a9:25:
                    72:a0:32:47:e2:70:ce:68:d4:70:95:62:16:f5:f6:
                    05:ee:b4:71:39:a2:72:64:d7:77:72:49:cc:65:8d:
                    bc:8c:7d:5a:ec:3a:3b:fe:d9:28:a3:d3:df:89:2e:
                    ae:0b:4d:9e:dc:92:c0:14:7d:80:d7:c1:af:3e:4a:
                    01:91:31:71:75:f2:7b:23:8a:65:d3:0a:a0:d5:49:
                    89:15:0b:e8:3a:0f:53:1b:2c:31:7c:18:36:e6:24:
                    98:68:6f:45:cd:50:18:39:fd:05:24:55:58:5f:55:
                    f7:02:a0:ee:18:c7:d4:3e:40:40:b0:d9:8e:85:af:
                    a5:4d:46:56:0d:87:4a:e0:77:a7:c1:13:24:9f:55:
                    2d:1f:cd:00:77:39:65:4b:65:23:84:a5:06:80:7a:
                    8e:a6:e0:6e:04:a4:06:0f:e7:e5:10:52:d9:97:db:
                    50:b5:e7:d0:d5:c3:61:7a:d8:68:39:f7:d8:eb:16:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:67:4F:E1:2D:3F:BD:0A:4C:07:BA:FC:11:B7:41:A1:9E:3E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7f36626d-1591-331b-b518-62dcf6f97ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:52:f5:94:99:3b:eb:16:ec:8f:44:ef:fd:c1:12:0e:6b:
         20:c7:80:72:ed:a8:7a:f7:d3:9f:11:aa:05:4c:02:d7:0a:32:
         2f:b5:21:4e:ca:47:66:02:b1:ca:44:33:2f:3e:94:b7:b5:43:
         a1:1b:b6:1d:f8:b0:fc:26:82:e7:f6:34:dc:8c:10:b3:ec:8a:
         bf:ae:67:69:14:d4:7e:b1:a8:d5:35:19:b0:cf:87:9f:06:cb:
         23:11:9d:14:33:72:b2:36:09:4c:0a:d1:69:bf:d0:f8:fc:e3:
         0b:86:7a:fa:de:cb:8e:a7:44:c9:11:2d:eb:35:06:c3:70:a1:
         0b:8d:1c:fd:02:ad:a7:4a:d0:12:b7:8e:24:03:51:36:19:95:
         f1:87:f9:73:c8:4e:6d:5c:c8:66:9f:bd:3d:23:ff:9b:c9:78:
         99:75:d7:f0:97:09:80:46:91:5d:5c:b6:f2:7f:a9:54:04:75:
         cc:62:e1:44:f1:62:f7:1f:79:06:09:36:cb:23:d1:e5:b2:51:
         bf:95:5f:d2:e5:0f:04:fe:20:6d:a2:1b:aa:76:79:57:b2:32:
         34:8b:f7:91:73:d0:4c:7c:32:b1:69:6e:de:32:1b:6b:eb:e8:
         24:85:39:df:77:b9:76:2f:ea:5e:0c:4b:c7:3a:72:1c:80:2d:
         56:0b:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:08 2024 by rpki-client on console-ams.rpki-client.org