Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa
File:                     8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa (raw, json)
Hash identifier:          aVEI9FUKIXxB5OS76xFuBQwQ/TfSdAnIHnve6U/Ah3I=
Subject key identifier:   47:25:7C:40:0D:AB:FF:C2:7A:48:C4:57:07:AF:2C:4D:6B:3A:AB:68
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E23DFF924C7661D5BCE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     32211
IP address blocks:        107.144.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e2:3d:ff:92:4c:76:61:d5:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=cc4bb1a0-1f65-4265-88f1-a019ff2e85c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:30:46:bc:84:8f:3d:1b:76:97:4e:52:4c:
                    6f:41:47:0d:8a:a2:00:ed:e9:e6:f2:84:ab:0f:00:
                    81:22:eb:09:00:19:3b:d2:ca:07:d3:29:86:2d:67:
                    f3:cf:25:ba:10:2b:87:c6:49:d0:9b:32:7b:e9:2f:
                    91:dd:89:9a:08:da:42:e6:16:4d:01:1b:e0:15:09:
                    42:4d:58:b9:83:d2:ba:4b:d4:c0:72:60:9f:5c:72:
                    68:46:21:04:9c:15:5f:b7:7e:9a:a6:57:e4:fa:f8:
                    92:a7:12:0c:68:7d:69:67:28:0e:b4:2c:cb:df:3a:
                    4c:01:56:d9:3f:c8:37:a4:f4:90:cb:84:28:59:9a:
                    f5:34:8c:e5:18:2c:ff:c1:78:3f:4c:ff:57:37:08:
                    10:61:58:ba:28:78:20:24:43:b9:af:61:f2:78:6b:
                    3e:a2:6e:ae:c9:4b:2d:88:e9:2b:db:15:31:49:6b:
                    52:32:da:7c:81:27:69:13:23:69:a6:26:b8:01:42:
                    af:ec:0e:db:67:58:4e:8d:81:62:62:f8:a9:c5:fc:
                    9a:f7:d7:4f:70:f5:5c:e7:5b:35:77:37:a2:e5:20:
                    69:07:d3:9a:87:f3:d8:58:16:d2:fd:a7:eb:bf:07:
                    f8:3e:9c:03:69:77:5e:8e:97:09:58:f5:07:f0:f2:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:25:7C:40:0D:AB:FF:C2:7A:48:C4:57:07:AF:2C:4D:6B:3A:AB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:f7:d6:b2:16:42:18:67:76:4d:bb:e7:be:fc:cc:e5:76:
         ed:fe:8f:a3:ce:09:f3:e1:2a:70:19:50:79:8c:c6:c2:1c:48:
         55:a4:7e:1c:75:12:ed:d6:0e:30:45:92:e5:86:5a:86:4d:13:
         e9:e4:07:b5:6f:10:1b:b6:3d:30:8f:53:18:97:48:c6:6e:42:
         c4:83:30:3d:c5:ce:1b:d7:ad:0c:4e:04:d7:7c:c8:8d:a6:16:
         94:a5:a3:ee:2d:19:d6:7f:72:89:c8:f3:79:f0:01:49:6c:48:
         e8:de:8b:4b:bf:24:ec:46:d2:dd:e7:38:8c:f4:4a:9c:0f:e8:
         60:97:33:5f:b4:cd:d8:47:02:0c:47:b8:f6:0f:77:d8:8c:7c:
         ef:d4:41:8c:2a:90:5d:be:57:c8:56:01:7a:b1:a9:49:bf:d3:
         6c:67:43:89:9e:6e:aa:dd:b1:64:69:77:a9:d3:72:a1:91:8e:
         76:8f:b8:0d:75:61:e2:e0:df:37:c4:d1:03:31:03:bb:27:aa:
         de:0b:86:cc:bf:62:76:d0:9f:ae:6e:d3:57:b4:1a:ee:e3:ff:
         05:78:1e:92:a4:94:12:a8:0f:62:7c:a2:eb:eb:9b:7f:33:b3:
         e2:33:c1:69:db:a2:c1:e5:7e:53:db:b8:f4:71:52:9c:99:7c:
         4d:83:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:50 2024 by rpki-client on console-ams.rpki-client.org