Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1753c70d-3cef-30a7-9a88-2c429ab15e7e.roa
File:                     1753c70d-3cef-30a7-9a88-2c429ab15e7e.roa (raw, json)
Hash identifier:          qpgVUcFQw+sEadbeSmc6EGX+dA67FrAUFbBUGLBXsGY=
Subject key identifier:   17:0B:AE:76:C9:C1:06:B5:19:C7:85:CB:85:D4:5F:65:D1:43:B6:0F
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845ADEE10665EEBD140656242B0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1753c70d-3cef-30a7-9a88-2c429ab15e7e.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     13213
IP address blocks:        173.244.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:10:66:5e:eb:d1:40:65:62:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=632cc781-9b69-4e36-bc7a-e583f63cce96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:3d:04:48:78:87:0e:36:ff:8b:3e:f1:67:
                    07:a2:4b:d2:d9:09:65:74:e2:9c:78:63:b6:95:16:
                    ac:8c:b6:2d:2b:f1:8a:04:9c:ab:3d:4f:79:a6:10:
                    17:5d:c0:4d:27:2c:a1:89:56:e6:3a:41:ea:8d:eb:
                    c3:22:74:f1:fb:6d:6a:e3:f4:29:60:2c:99:35:57:
                    0c:8a:86:01:cc:cd:48:66:74:03:6e:47:25:41:02:
                    a2:fe:4f:96:2b:5b:a5:0e:d4:11:b1:ea:4d:8c:e5:
                    b1:56:ba:d3:e5:46:11:ab:36:79:35:80:7c:7d:36:
                    ba:58:94:11:43:f4:c0:8c:02:29:e8:be:d3:1a:fe:
                    86:98:ca:b4:e0:fa:50:d0:8b:8f:af:d4:44:8e:11:
                    a9:62:9a:12:b8:28:31:f1:8f:bb:4c:a0:ed:6d:8c:
                    8d:b6:aa:a3:d3:4e:85:41:79:eb:36:53:74:18:10:
                    e1:dc:5a:79:47:da:d8:fc:6d:5a:f6:39:e4:37:57:
                    88:fb:82:f7:0e:e1:72:71:23:d5:6a:86:51:27:e8:
                    43:be:0c:7c:9c:04:dd:2c:40:be:42:46:f5:8a:19:
                    26:3a:e2:e7:18:da:9f:ee:b4:bb:76:e0:26:7c:0b:
                    bf:07:7c:9c:c7:c2:a7:48:5b:43:b3:b5:52:ce:9f:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:AE:76:C9:C1:06:B5:19:C7:85:CB:85:D4:5F:65:D1:43:B6:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1753c70d-3cef-30a7-9a88-2c429ab15e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:24:3a:ee:d7:6b:c6:d9:6f:b3:ad:29:69:8b:8b:7a:89:
         54:39:cd:86:13:2e:fe:3c:51:fb:9e:54:64:de:59:d8:ba:92:
         0a:54:bc:e1:a0:ed:69:aa:30:47:dd:df:29:c9:62:cf:2b:14:
         24:6b:46:1a:ab:ba:0d:fb:e0:a9:56:f4:98:40:0e:fb:3e:93:
         cd:8e:ea:fc:b0:bd:e7:04:d3:26:dc:97:c8:fb:ea:02:4d:ab:
         c0:31:bb:33:f9:f1:22:d3:95:5e:a2:87:84:d3:c0:76:9b:b5:
         50:69:ad:77:cc:66:69:e1:82:50:0e:6e:bb:cc:ef:91:61:5a:
         7b:e7:99:bf:06:30:a0:50:f0:07:cc:7b:64:83:fb:81:bc:c4:
         f8:19:c2:c1:a5:24:9f:ae:28:6b:ee:86:a7:f4:9f:82:d8:f3:
         e9:2b:b2:03:c5:8a:a9:a3:55:1d:5a:4f:97:f5:95:68:cd:40:
         52:3d:11:43:0c:41:44:f2:7b:16:e3:c6:27:60:ea:83:3b:a5:
         c6:ef:40:e1:19:53:24:ee:7e:39:24:15:60:18:7c:38:f4:ce:
         2d:e3:91:bf:01:c5:52:56:fa:6f:15:91:dc:ed:c1:94:eb:42:
         db:c6:88:82:e6:79:b6:e9:cc:a5:15:b4:9d:ef:b9:77:8d:4c:
         4e:f9:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:41 2024 by rpki-client on console-ams.rpki-client.org