Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
File:                     1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa (raw, json)
Hash identifier:          xA2MseZwpp4qsPFPvHc7+zdO7rPqOYWKWBiEbrE5u8I=
Subject key identifier:   0B:0A:1C:76:92:4C:D9:A2:2F:11:EA:68:40:4F:30:84:61:1E:06:DF
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858454625607E58DCC380C73091C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
Signing time:             Wed 20 Mar 2024 20:47:58 +0000
ROA not before:           Wed 20 Mar 2024 20:47:58 +0000
ROA not after:            Tue 18 Jun 2024 20:47:58 +0000
asID:                     36492
IP address blocks:        209.107.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:60:7e:58:dc:c3:80:c7:30:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:47:58 2024 GMT
            Not After : Jun 18 20:47:58 2024 GMT
        Subject: CN=3a7c8ef7-5187-4dac-b88f-cc0c30c92c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:b9:1a:25:54:cd:84:7d:f5:02:1d:4e:b2:
                    dc:19:c9:07:3b:7c:04:12:ed:c1:bf:40:fa:e6:c4:
                    99:17:c6:32:09:8b:9f:6b:cf:81:07:86:e1:93:a7:
                    bc:43:21:b2:eb:42:1b:37:55:83:0c:69:db:65:f1:
                    56:34:f6:3e:cd:52:38:9b:47:a8:a2:f1:da:43:bc:
                    68:62:a9:18:df:32:ea:f3:b4:08:7d:ef:b4:16:6b:
                    9c:8b:5c:75:cd:6b:23:2b:00:d2:e5:36:86:f1:be:
                    d0:fa:ef:1e:c0:2e:87:ef:a8:17:e1:a5:ec:0a:68:
                    8a:23:2a:67:8f:a1:6c:d3:16:77:ab:3a:15:e5:9c:
                    8b:a1:40:68:43:68:c5:60:18:40:9e:dc:dd:3a:e8:
                    ae:13:a6:16:3e:42:97:05:6c:1d:b6:00:3f:fc:7f:
                    61:97:08:48:d4:47:da:56:6b:1f:49:52:04:41:16:
                    9d:0d:e3:2e:a4:e6:02:59:d5:88:dc:e7:9c:b9:bb:
                    05:19:dc:fc:37:50:56:a7:39:13:f9:5c:a6:2e:b9:
                    f3:3a:78:26:73:b1:05:63:d6:c8:8b:40:71:4a:45:
                    34:ad:29:ec:98:f9:13:f9:25:07:59:c9:66:9d:34:
                    84:dd:93:bc:0f:93:8d:f7:e9:25:75:42:6d:ce:40:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:1C:76:92:4C:D9:A2:2F:11:EA:68:40:4F:30:84:61:1E:06:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:18:76:eb:b2:0f:e7:59:34:66:8e:ab:d2:a3:19:18:e0:02:
         f6:08:1e:7e:e6:d9:58:3d:5f:62:7e:ac:8f:ba:8a:06:58:ef:
         c0:da:28:8a:1d:06:6b:82:4f:40:4d:bd:c6:bc:67:d0:f5:a1:
         84:a7:e1:0e:25:7d:72:9b:97:79:f3:76:03:34:b8:c4:ff:12:
         cd:ee:84:13:2a:18:29:c4:23:68:11:a3:42:de:ac:22:d3:61:
         e0:70:3b:e0:6e:38:af:4f:f5:21:09:d5:70:30:65:0f:c9:12:
         9c:d2:4d:a0:00:62:43:4c:ba:19:88:17:bd:c5:bd:e3:6d:6e:
         7b:e5:3c:e8:5a:46:87:8c:b6:fb:cd:97:e6:ea:f4:c1:37:28:
         ad:bb:e3:43:02:cc:6d:86:37:ae:a3:25:c4:a3:8e:a6:56:44:
         ab:25:49:9e:58:ce:73:97:a8:6a:3d:91:61:df:62:c0:e3:19:
         1c:e1:b2:a1:18:db:e6:b1:74:23:e4:60:31:35:a0:66:fe:c9:
         05:cc:9d:92:b8:38:f6:77:99:32:34:5d:42:fa:f9:06:d5:c3:
         26:37:83:89:da:eb:c4:16:27:7c:9d:c0:db:bb:00:ff:a7:a5:
         5a:fa:b8:d0:31:51:a3:d7:f9:e7:d4:9a:2e:fa:b4:ba:b3:30:
         a2:2f:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:27:45 2024 by rpki-client on console-ams.rpki-client.org