Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e07b5946-9f6a-3706-9da7-59610af44ae5.roa
File:                     e07b5946-9f6a-3706-9da7-59610af44ae5.roa (raw, json)
Hash identifier:          7Cyu6EJ7LSCCvlrUOiMJSPr5YvLM6IPPk7nlXWnqdJU=
Subject key identifier:   B9:50:C5:A6:2C:47:8E:29:54:D3:97:4C:00:5D:29:A0:3C:04:25:FE
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858454626A93CD46D0DA5E837B8C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e07b5946-9f6a-3706-9da7-59610af44ae5.roa
Signing time:             Wed 20 Mar 2024 20:50:33 +0000
ROA not before:           Wed 20 Mar 2024 20:50:33 +0000
ROA not after:            Tue 18 Jun 2024 20:50:33 +0000
asID:                     36492
IP address blocks:        209.107.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:a9:3c:d4:6d:0d:a5:e8:37:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:50:33 2024 GMT
            Not After : Jun 18 20:50:33 2024 GMT
        Subject: CN=b11d0602-b368-46e6-a9b0-d99db3af4915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:ee:18:9d:12:a6:48:89:c3:80:e0:8a:fe:
                    fe:8a:47:83:55:6b:44:c9:46:d7:90:2a:9d:98:86:
                    c9:a8:25:a5:4a:7d:d5:02:a3:80:63:a8:b1:cf:9d:
                    16:da:bb:18:37:6b:f6:4b:f7:9b:a8:c7:8f:3b:e8:
                    0a:7f:7e:3b:69:4a:19:5d:27:3f:3d:d9:a7:2c:f1:
                    de:23:82:65:f7:95:97:f1:56:5d:44:90:eb:55:7d:
                    11:03:ca:f4:17:54:12:df:15:18:ed:cb:23:1a:0c:
                    2f:2b:26:c3:96:c3:9e:2e:aa:c7:f9:8a:53:22:a8:
                    74:ad:c1:2a:53:62:24:fe:95:a4:37:86:f5:8e:80:
                    47:b3:a1:fb:05:93:f3:a0:84:88:10:91:f3:e0:a7:
                    ea:38:67:d2:25:f1:c3:fe:cb:64:15:6e:37:b6:e5:
                    4f:47:47:8e:fa:15:e3:30:9a:df:38:35:f0:98:7c:
                    f0:dc:30:a3:7d:9e:cb:45:6f:49:e1:57:78:10:d4:
                    6c:7a:af:06:a3:a9:d8:bf:0e:54:5c:9d:c5:d0:e9:
                    2e:dd:f6:ea:1c:cd:af:15:61:f9:1f:33:0e:71:2d:
                    2f:fa:01:ae:cf:d3:01:23:9d:75:1e:c3:48:4c:ef:
                    56:7f:f4:9d:2f:b1:ed:b2:44:7c:05:93:23:8f:36:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:C5:A6:2C:47:8E:29:54:D3:97:4C:00:5D:29:A0:3C:04:25:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/e07b5946-9f6a-3706-9da7-59610af44ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:6b:8e:d6:b8:db:a9:f4:b2:a7:77:8e:30:fe:7c:c5:eb:
         28:b4:ff:a3:9d:b0:84:ed:40:d4:4c:df:b1:a6:50:97:9d:62:
         be:fb:ee:87:65:68:55:03:7e:48:9f:e7:66:b1:01:12:51:90:
         f5:71:90:cb:5e:7f:98:88:4a:42:5e:9b:59:b1:31:46:b8:30:
         4c:9f:c2:49:5d:46:e4:9d:8f:59:0c:80:0e:52:fb:d5:43:f2:
         93:aa:de:bd:5e:de:41:0b:a5:5a:dd:83:e3:31:86:9d:a5:12:
         c4:7b:f3:e6:12:f8:d2:d2:a2:4d:1f:1f:cf:5d:cb:cb:d4:9a:
         76:3a:03:1a:4f:37:b0:a9:e0:b9:87:68:ee:96:49:eb:0c:74:
         e5:67:e6:6c:3e:89:b9:72:ad:59:5a:eb:da:b6:2e:bd:82:a4:
         f4:a6:b8:51:50:3a:d5:3e:a7:ed:20:f3:04:06:d4:f7:e1:da:
         9a:cd:04:5d:b4:74:3d:89:4d:f4:1a:3c:b3:cc:2e:10:da:27:
         a7:12:f3:31:ec:4c:64:49:1d:b7:0d:be:45:d1:c0:36:95:94:
         26:d4:aa:0a:63:c0:5a:1f:d6:54:31:7b:eb:9a:e9:f6:67:56:
         3d:35:8a:55:aa:9c:f9:33:e3:b8:53:99:ed:48:0b:76:ca:82:
         23:0b:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:18 2024 by rpki-client on console-ams.rpki-client.org