Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa
File:                     22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa (raw, json)
Hash identifier:          UeWIkcePUKsPWn/e7AHAI7C1YAe2xw9NCWTjkFH/UFE=
Subject key identifier:   6B:8E:8E:46:8A:AA:77:24:4A:46:41:DD:3B:54:06:63:0C:C3:A8:E8
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858454623D44C597EFC28A53A3800
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa
Signing time:             Wed 20 Mar 2024 20:44:51 +0000
ROA not before:           Wed 20 Mar 2024 20:44:51 +0000
ROA not after:            Tue 18 Jun 2024 20:44:51 +0000
asID:                     36492
IP address blocks:        209.107.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:d4:4c:59:7e:fc:28:a5:3a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:44:51 2024 GMT
            Not After : Jun 18 20:44:51 2024 GMT
        Subject: CN=088bcf9c-092b-44a9-b432-714561e8537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:02:d7:74:59:35:1e:8d:52:45:f2:e9:50:
                    be:0f:e1:90:ee:12:41:be:d0:27:3e:96:73:9a:80:
                    19:2a:8a:8d:33:e0:b0:e1:7f:dc:5e:71:37:2c:0e:
                    9c:8e:27:eb:e4:f2:3a:57:f0:7e:a7:63:41:ad:b8:
                    13:09:9b:59:bb:d8:45:e6:37:86:e5:6e:4b:e9:a6:
                    32:2f:91:16:04:07:88:60:8f:78:e6:47:a1:da:05:
                    f9:6e:0c:ef:94:1f:01:c8:02:cc:9f:fa:08:91:53:
                    13:eb:a2:1d:ee:e3:84:a5:ef:86:82:3c:6e:b0:49:
                    c3:7b:c7:a3:58:d2:28:d8:4a:2a:fc:b9:3c:54:76:
                    66:e1:8e:8d:75:e7:78:4d:02:ba:71:23:47:22:fa:
                    bb:40:bc:e4:a7:2f:29:eb:b9:c4:4e:d0:fb:11:6e:
                    0e:9f:23:2b:4c:0f:7f:93:9a:f4:a7:15:8f:64:0d:
                    4a:a0:66:fc:05:63:4d:c8:92:f8:3c:a5:62:92:94:
                    83:69:6f:26:6e:73:11:9a:b7:3c:af:b8:e3:7b:3e:
                    4f:50:de:7a:49:99:7d:d2:71:0f:55:78:d8:fb:c2:
                    92:b3:3c:8e:0e:7d:1f:38:6b:c2:c0:b7:8c:d9:54:
                    03:a1:3e:f4:65:30:b2:12:e6:94:dc:af:2f:66:30:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8E:8E:46:8A:AA:77:24:4A:46:41:DD:3B:54:06:63:0C:C3:A8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f9:4f:7e:e3:e0:80:10:4a:81:a4:9c:61:c9:18:e7:e0:17:
         a8:bf:f6:b0:79:02:4b:ee:c0:1d:46:12:6f:7a:75:86:ee:94:
         07:d9:c9:9d:75:c1:17:74:dd:bd:a9:97:10:28:ac:88:51:60:
         b1:f6:0a:ef:84:4e:fb:cc:20:31:d3:f9:b0:3e:04:45:cc:17:
         f6:0f:f4:95:8a:20:df:dd:75:21:13:58:88:b0:f6:7e:6c:c7:
         70:43:d0:74:5f:7b:ef:93:87:32:4b:e7:f8:7b:2c:80:aa:f5:
         d7:39:54:67:02:c9:79:b8:f4:8b:12:ee:6c:7c:29:b6:6b:7d:
         16:98:dc:48:f2:d9:7f:7c:25:0b:a5:bd:60:ab:7d:da:ce:15:
         79:ac:06:e6:83:68:df:47:8e:44:95:05:de:58:fe:a7:c2:24:
         fc:cc:72:bd:2f:e1:87:4b:8b:6e:10:a4:a1:15:10:74:0e:b0:
         91:ad:50:08:f9:5f:73:76:0a:a4:be:bf:f9:64:3e:6a:20:e2:
         3e:8b:4e:7c:ba:b8:02:c0:74:4e:dc:71:84:08:e1:7b:4b:f5:
         ab:36:08:7d:42:5f:77:34:0d:e5:f8:a6:9f:aa:e8:65:48:05:
         d4:b0:25:8b:4c:b7:9c:2c:a3:7d:41:47:f6:a8:5f:9c:f3:7f:
         82:72:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:41 2024 by rpki-client on console-fra.rpki-client.org