Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa
File:                     d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa (raw, json)
Hash identifier:          Dh7ad5qa/nW30RNNTwOR3fz/uy0xBeU0ijqN/P7dk0I=
Subject key identifier:   A4:75:2B:DF:56:6E:2D:F0:7F:E1:9C:82:65:F9:AB:0B:10:FD:D8:40
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285844F19AAFAE6A0E80B6FBAB44D8
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     13213
IP address blocks:        206.190.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:af:ae:6a:0e:80:b6:fb:ab:44:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=49265b83-126e-4d95-b815-ee0bf748e42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:c3:47:53:bb:24:d6:fe:17:eb:ce:94:d5:
                    84:18:e4:df:00:0d:c2:e8:4e:9d:c7:ac:f7:16:58:
                    a1:21:03:99:04:ab:7e:44:ad:06:6c:fa:9d:ba:08:
                    93:8b:72:fe:97:13:68:36:5d:7e:47:de:8b:3a:f1:
                    ec:65:e4:92:bb:b7:ff:9c:2b:35:1e:d6:c2:c1:ac:
                    ac:61:68:a1:1e:8c:5a:93:b3:b0:36:dd:a0:ab:9d:
                    3e:b0:0e:b7:56:c5:37:89:30:cc:ac:0a:48:46:e1:
                    43:e7:0a:97:b2:6f:49:9f:38:b3:63:c8:02:63:26:
                    08:8d:6a:58:8a:16:4a:d7:fe:99:a5:17:2b:41:ce:
                    5a:23:b3:e5:59:bd:44:12:95:6e:e3:e1:a0:95:a6:
                    11:da:21:09:98:56:11:e0:35:6a:8a:62:e9:b7:f4:
                    0c:44:36:ea:74:b9:f9:01:49:22:d3:4e:b4:0c:b2:
                    60:9f:49:b5:ff:99:56:50:79:b5:31:01:d6:39:51:
                    85:ea:20:46:dd:a5:2c:ab:c0:6b:f4:20:84:42:6f:
                    e3:68:31:e7:56:3d:39:d7:f0:88:c4:59:78:76:d1:
                    99:b4:ef:cd:71:a6:84:85:d1:da:f9:87:13:76:6a:
                    47:5d:02:61:f0:d0:89:61:57:63:c9:69:86:db:e1:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:2B:DF:56:6E:2D:F0:7F:E1:9C:82:65:F9:AB:0B:10:FD:D8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/d2aa449b-5a07-392c-ac68-b91e3a4f0277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.190.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:a9:d8:69:75:8f:eb:60:0a:e5:66:1f:54:2d:a9:a4:a5:
         39:3b:90:11:ae:07:4b:88:6c:da:70:b6:f2:65:4e:87:99:f4:
         39:72:88:04:de:70:b9:a7:53:9c:ce:f2:b4:52:8c:93:66:84:
         f1:fe:58:0b:f6:cc:72:5b:4a:9b:43:59:f9:65:5e:93:51:ca:
         71:1e:24:df:14:33:06:04:71:1c:46:6e:fe:26:a6:15:ef:c6:
         e7:49:93:ef:be:47:f8:22:ee:3e:ab:c0:d5:47:e2:12:b5:8b:
         dc:9c:54:6b:e4:77:12:28:b3:8f:de:87:15:05:63:07:0c:46:
         7d:07:c5:e1:f8:d8:11:93:5d:e3:96:d6:fa:94:20:e0:7a:0e:
         07:ec:5d:c2:10:8c:5a:f0:4f:8a:89:8b:5a:bb:fd:b7:f7:01:
         cc:32:ac:1d:07:e0:93:36:6e:be:91:9c:3b:9f:54:8c:85:b3:
         e5:05:28:05:78:3d:af:9a:45:c5:f8:97:ec:29:73:f4:a3:b0:
         2b:7a:d4:21:19:aa:39:80:d2:31:1e:72:27:2e:c1:c6:a6:d4:
         25:ce:5f:de:61:4a:a2:75:72:a6:e4:12:d4:a8:32:bb:9e:9d:
         c1:ab:ca:7f:16:7e:ea:74:42:12:fe:86:b3:cd:aa:03:b4:5c:
         7c:12:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org