Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/89a453ad-ffb7-3118-9838-aac18167e8d0.roa
File:                     89a453ad-ffb7-3118-9838-aac18167e8d0.roa (raw, json)
Hash identifier:          MuUFqo5466gUZvhYfTX1VktTTODiLjRngsBddx4DfxM=
Subject key identifier:   F2:F3:E5:B8:B4:7A:BA:15:35:D4:5D:BD:E0:0E:46:34:06:AB:3D:38
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285845B4E8D518D8B88A2BAE828F08
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/89a453ad-ffb7-3118-9838-aac18167e8d0.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     32780
IP address blocks:        173.244.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d5:18:d8:b8:8a:2b:ae:82:8f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=c43ca09c-644a-44b3-983a-77f196985269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:6e:39:bc:f4:0d:e2:59:24:14:f4:6a:43:
                    28:af:59:db:82:a9:0a:17:1b:cc:93:68:6d:df:ec:
                    c3:bc:6b:d4:0f:ce:bf:0c:9b:2b:97:8f:ef:3c:f3:
                    b9:19:01:37:ef:50:ed:32:61:13:fa:87:1a:b9:9a:
                    1e:ca:a6:dd:dc:ab:b2:ee:8c:3b:a7:df:a6:7b:38:
                    ee:fb:d2:06:5c:93:0c:05:9b:59:01:aa:2d:50:64:
                    5b:12:92:5f:3e:17:68:37:6e:2b:1c:54:66:20:62:
                    d7:02:92:e9:e0:cd:36:64:e7:32:5d:21:f5:ff:29:
                    03:73:63:21:eb:26:8b:bd:18:a8:ee:b0:14:0e:46:
                    f2:21:c2:0c:66:80:c4:31:41:a3:ea:14:13:d1:33:
                    16:c2:c0:5f:a7:6b:03:3a:ac:a0:58:e6:70:98:ee:
                    d5:84:2d:05:09:c9:b6:10:cd:13:5f:ac:8a:19:3d:
                    10:66:ae:d4:11:b8:16:7a:ff:a3:43:b1:b9:d4:ae:
                    0c:fb:45:4d:eb:01:80:aa:5f:3e:c7:8e:a4:73:a6:
                    c8:50:f2:5e:d8:62:1b:d5:de:b4:11:57:33:94:0a:
                    6b:2f:bf:7a:4e:14:27:60:69:bc:fc:75:86:3a:2b:
                    92:73:36:65:7e:50:0e:59:30:2b:4d:2a:d6:12:e7:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F3:E5:B8:B4:7A:BA:15:35:D4:5D:BD:E0:0E:46:34:06:AB:3D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/89a453ad-ffb7-3118-9838-aac18167e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:67:13:b1:07:95:a5:1d:9f:24:be:e8:84:52:39:e5:df:
         76:d3:b3:10:91:9f:ea:1f:ac:63:33:ec:3f:ba:73:1f:fb:7a:
         a3:95:15:c5:c1:18:81:c0:af:2f:c1:d8:40:37:e8:4d:aa:f5:
         17:f9:fc:6c:05:95:1a:91:d9:ec:e4:10:30:b9:af:f3:29:a4:
         1b:e1:26:99:8b:31:e2:fa:a8:7b:d2:6e:3c:da:c5:46:20:a0:
         ee:d4:c5:da:b3:b0:62:8d:1a:17:5d:16:21:fe:62:db:34:d9:
         a1:2c:d9:ba:9e:a1:ca:67:c8:15:b6:5d:1b:00:0e:c3:d5:85:
         8c:7d:0b:00:5f:8c:9f:52:64:4f:b6:1b:a4:6d:71:9d:75:a4:
         4d:d4:3f:95:f2:e1:17:f2:e9:39:9e:77:a0:99:97:46:f1:c4:
         0d:e4:2f:6a:36:f8:27:6c:e7:b1:6f:90:35:a7:69:14:75:25:
         49:f6:b0:04:4b:16:46:e2:ce:85:9c:bf:68:28:8c:f6:b7:91:
         e2:bf:31:6a:5b:34:5d:cc:fa:e6:98:78:25:98:f1:a6:60:c8:
         5d:e0:7f:29:a2:92:59:2a:ae:01:4e:0e:3f:5d:a2:25:1f:5a:
         39:79:46:b9:ff:53:58:14:d3:78:ca:4c:18:1e:6d:19:ec:6e:
         eb:4a:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org