Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
File:                     6e84b623-e3a3-3f1f-88da-e527e9861998.roa (raw, json)
Hash identifier:          Kdwo6PAA8XirGmX5GfXO2sE8JQjnoyxnEy+XVTYRiC0=
Subject key identifier:   4E:76:7A:9B:26:73:26:CA:ED:3D:BE:86:5F:A8:D6:19:19:29:74:F6
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584546273001C8A3AB3A20894B00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
Signing time:             Wed 20 Mar 2024 20:51:37 +0000
ROA not before:           Wed 20 Mar 2024 20:51:37 +0000
ROA not after:            Tue 18 Jun 2024 20:51:37 +0000
asID:                     36492
IP address blocks:        209.107.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:30:01:c8:a3:ab:3a:20:89:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:51:37 2024 GMT
            Not After : Jun 18 20:51:37 2024 GMT
        Subject: CN=56f680cd-b22e-49f6-a302-e65898ce7abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:07:87:36:4d:5c:a2:dc:3f:11:ad:9d:5e:
                    6d:19:b1:3e:27:bc:71:38:7e:71:67:b2:b8:d8:cd:
                    51:a7:7d:dc:fd:fa:a9:30:2e:9d:d0:3b:fd:56:6d:
                    36:1b:80:62:a5:29:8b:c9:78:0e:3f:bc:8f:9a:14:
                    e1:2b:8e:45:51:0f:4f:3d:9b:26:f8:8c:80:07:68:
                    62:2f:07:f9:95:6b:11:12:53:28:54:ca:8d:6a:ff:
                    6e:89:8c:d8:f6:4a:49:a1:21:78:f8:79:69:df:3c:
                    92:a4:72:d7:89:da:e5:65:26:3b:f3:54:fa:8f:71:
                    c9:d3:87:69:d9:64:6b:c0:81:4f:f6:ba:dd:3a:29:
                    83:97:ae:82:fe:8a:43:a5:4d:cb:aa:b2:cb:46:d7:
                    9b:95:60:ce:07:ee:7f:0f:0e:72:ee:5a:95:2d:cb:
                    ed:21:80:ff:53:d5:de:bf:d6:4f:ea:3f:38:62:94:
                    fb:88:24:f0:ce:bb:1d:be:a7:70:32:8b:48:0e:8c:
                    6f:5e:53:d6:cf:dc:63:c2:ab:e4:69:18:8f:78:2c:
                    80:c2:e9:68:01:a1:37:ec:2e:41:45:8b:f4:e4:16:
                    15:b0:86:b1:48:84:4e:eb:b6:25:60:77:87:49:4c:
                    40:f3:9d:38:40:4b:be:75:e7:a9:0a:42:d7:35:74:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:7A:9B:26:73:26:CA:ED:3D:BE:86:5F:A8:D6:19:19:29:74:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4b:0d:a4:49:bf:50:3b:2a:41:d8:39:45:09:47:07:cd:ca:
         46:a6:69:05:68:03:74:94:b9:84:cd:73:07:60:66:3f:03:be:
         f6:85:7f:61:11:b4:a9:8e:be:7e:09:6f:ef:8e:be:60:59:66:
         c4:a7:ac:c3:12:d7:b0:68:bf:63:c6:7e:1c:f1:7d:3c:1b:45:
         03:87:7b:4c:ec:bd:33:f3:46:13:2c:cc:82:66:00:00:ad:c6:
         cf:b1:b0:bc:78:cf:05:27:88:eb:88:fd:88:f0:97:a1:4f:72:
         ea:92:13:e4:b3:18:ed:27:90:6a:bf:08:87:22:d6:bd:72:e1:
         bf:c0:47:88:7f:f2:93:12:c0:6e:80:d6:8b:8c:38:14:40:9b:
         4e:b5:2e:17:1f:fc:30:f5:17:a8:99:0c:f3:7a:a5:be:fa:26:
         01:3a:cd:fc:9e:7d:0a:66:ce:ab:bd:5d:e8:0a:12:b7:46:87:
         17:54:86:ad:0d:13:4e:34:c9:57:35:14:b5:09:4a:a1:6a:7a:
         b2:e5:a5:d9:0d:a2:e8:41:ec:a0:4c:fd:85:8a:a3:05:be:f6:
         7c:30:3c:61:be:e5:d4:17:ee:56:ba:4e:ea:2c:48:c2:82:72:
         a1:77:05:bc:38:08:2b:15:85:e8:83:2f:6b:8c:b9:a5:3a:96:
         5b:3b:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:18 2024 by rpki-client on console-ams.rpki-client.org