Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa
File:                     a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa (raw, json)
Hash identifier:          Ny1tM5cwRHyJfUlmFnpo1Wzb36bEKqv7FRiT3nXMpL4=
Subject key identifier:   8B:3D:3D:56:AE:D7:23:1B:1C:1F:4E:45:91:DB:47:0B:EA:0E:F7:EF
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584522759D68DE435331EC0C1880
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     61317
IP address blocks:        216.185.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:9d:68:de:43:53:31:ec:0c:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=ac307b2b-1563-47bc-b825-93fd744936da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:c0:c5:fc:68:3c:e8:60:3c:dc:70:a7:e5:
                    91:bc:83:08:7b:9a:69:49:88:41:c7:48:81:2e:3f:
                    99:77:6e:7a:cd:fa:42:50:fa:54:32:22:08:26:b3:
                    63:17:ee:fc:62:41:8a:e1:44:9b:67:2f:c2:8e:ef:
                    65:b3:f9:5d:b5:f5:2d:e2:32:6b:87:ca:2c:b9:06:
                    11:7e:5e:79:cc:6f:9d:b2:d5:ee:7b:00:01:5e:96:
                    3d:d8:30:c4:03:b5:93:13:e4:a6:b2:29:f6:a3:21:
                    c8:6e:3f:98:ba:ee:8b:18:b2:b1:97:72:c5:f7:0a:
                    1c:38:a2:b1:3f:74:8e:ff:fa:cf:92:d7:38:5b:90:
                    24:2f:21:74:fb:39:c3:fc:26:37:7d:75:e3:e9:8b:
                    41:57:d0:63:ae:68:e9:22:ec:4b:4f:e0:9e:cf:9c:
                    7a:d6:3f:c0:d6:1d:ce:e8:ac:d3:c1:1d:42:a9:26:
                    76:60:e9:ec:e2:14:d9:c9:9a:e7:2c:12:50:f9:96:
                    15:92:42:d2:11:5b:5c:98:fd:81:c3:37:25:9b:1f:
                    e2:8e:98:d6:07:e2:65:a9:c3:d8:35:49:be:8b:7e:
                    5b:2c:1d:03:61:2d:27:a5:8e:68:79:b0:c3:1b:4e:
                    1d:f0:88:d3:fc:e4:3c:2c:95:54:1e:a8:35:de:d8:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:3D:56:AE:D7:23:1B:1C:1F:4E:45:91:DB:47:0B:EA:0E:F7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a7a777d6-a2f6-3a87-aab0-62d7d9f3f21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:57:1d:db:b3:6e:fa:85:29:a9:12:6e:9c:f7:88:06:71:88:
         78:57:a4:80:17:ca:1e:99:0d:b5:e2:28:40:1f:ca:91:bd:a5:
         b8:8e:31:50:0d:ac:1e:bf:bd:17:0e:24:56:11:69:93:07:a6:
         fe:ab:91:4e:b9:c1:ed:bd:d7:95:23:0c:30:b5:04:d0:db:99:
         95:8f:94:c0:09:e8:0c:76:dc:ec:09:14:5d:86:53:b7:03:4e:
         c8:ff:60:7c:fb:d8:40:24:aa:51:f5:8f:f4:db:fe:bb:a0:ec:
         f8:20:1d:a9:d2:35:c0:50:8b:49:65:41:8b:b6:fa:43:9d:fb:
         ca:bb:87:08:2c:fb:f0:28:5e:22:60:c4:2f:40:78:bd:35:92:
         9e:52:74:91:94:96:93:91:d9:6c:53:23:61:60:c7:cb:06:ce:
         1c:18:36:09:5c:b6:b3:41:2d:85:25:7b:00:b1:9a:74:7a:1a:
         ba:9e:ca:39:d0:44:87:f6:a6:9a:db:bc:ed:9d:ff:fb:d2:52:
         f5:8e:2e:d5:47:56:3f:38:09:c8:78:7f:f3:30:61:5a:82:ee:
         49:9f:14:c5:2f:fe:5c:e4:5e:1e:49:f3:0f:c2:42:50:33:a2:
         40:36:37:01:2d:72:cb:be:a5:f2:15:d8:21:6f:34:6e:43:e8:
         2f:6f:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org