Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa
File:                     240b6f95-075e-3765-ac83-646e1bad1d40.roa (raw, json)
Hash identifier:          Y3BaNQlZnLZ9LhQHrxkjnor8D9GlFUAEiHZ0EThmSfo=
Subject key identifier:   2D:A0:EF:D3:AB:84:A9:8D:B6:0B:42:3F:9A:AC:18:61:9B:EB:B3:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC302559561C042D8E9AC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        107.147.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:02:55:95:61:c0:42:d8:e9:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=acfd1ab1-dd20-4898-8fe3-3f3a27905211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:11:50:e7:84:4b:f6:6c:44:f8:58:eb:dd:
                    33:f5:ed:f3:26:d5:67:b0:cb:0a:36:db:5e:bb:0a:
                    b9:20:3f:78:bf:90:8b:95:0a:a7:85:dd:a3:f7:6e:
                    2b:2b:15:8c:ca:fe:7f:73:e2:73:2e:8c:09:82:d5:
                    16:88:e0:fe:7e:e8:8e:da:39:c4:b5:b2:de:c9:48:
                    64:3f:c1:0d:3a:9d:df:c3:8e:72:06:da:6e:79:42:
                    b9:b2:e8:47:9d:a7:aa:10:44:85:5f:c3:a1:54:55:
                    ff:46:f2:52:c3:56:cd:0d:f2:02:0f:f3:93:38:ff:
                    41:72:90:df:56:1e:41:2d:38:7e:28:55:31:c7:0b:
                    0c:42:83:9e:11:83:e2:48:e8:69:9e:b3:96:df:d3:
                    dc:7a:ee:a3:47:78:d3:9f:48:e6:67:17:a7:c4:d6:
                    82:77:0d:54:8b:3e:e8:14:ad:7a:eb:da:33:d5:52:
                    07:1a:52:07:c3:b2:c0:a6:23:d8:b8:9c:3f:d6:be:
                    83:ac:11:22:d3:3a:7a:b6:93:f7:8e:d2:2f:d7:1e:
                    7b:45:6c:d1:82:1a:1e:c5:54:10:6f:8f:75:bf:a4:
                    a6:08:f1:7b:ad:6e:70:27:ea:89:6e:91:88:09:b2:
                    69:6f:e5:ba:c6:a9:f7:13:45:41:93:b3:95:9a:18:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A0:EF:D3:AB:84:A9:8D:B6:0B:42:3F:9A:AC:18:61:9B:EB:B3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.147.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:35:54:ed:c0:72:7e:e3:e2:0e:e4:7f:92:54:b8:45:33:
         94:a5:be:0b:3b:31:98:cc:b5:33:09:8f:95:cb:7c:4c:ec:dd:
         f4:b5:43:48:3f:4a:a2:17:24:01:e4:32:90:b7:3a:88:91:4e:
         2f:ba:f6:22:8d:ea:b7:47:c8:74:3e:22:37:7d:a5:55:b7:4c:
         48:d9:71:3f:45:05:ae:72:13:8c:88:75:19:fc:40:96:94:b7:
         83:50:43:1b:9a:d5:02:f7:d2:0d:ca:02:db:ae:e2:bd:93:c4:
         83:e5:00:9b:dd:0f:5a:7f:2d:72:f3:3b:5c:08:f0:24:df:ad:
         d1:6e:90:96:c6:4d:19:b3:81:0d:cf:ed:ef:f0:9b:4b:09:aa:
         84:a8:ce:9f:61:de:a1:a6:aa:bd:07:3c:d0:41:81:fa:6f:c2:
         7c:fe:dd:2e:d6:b7:aa:2f:46:bb:db:45:16:72:fa:7f:48:9d:
         45:00:dd:92:95:06:e8:69:eb:7d:fb:24:76:9e:d4:c4:ea:b3:
         3e:71:f1:18:34:d1:ea:d1:d8:f7:0e:bc:69:10:13:24:8a:e1:
         b0:71:d2:d8:24:35:33:85:7f:18:73:e6:9b:0e:0c:21:83:51:
         31:05:5e:6b:2e:c9:75:37:24:3a:fa:11:bf:13:18:81:2d:68:
         0e:4c:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org