Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa
File:                     3244e627-103d-3ceb-9e4e-605b4c86ee79.roa (raw, json)
Hash identifier:          eADtHI2Wbl+LLW+M0Nvm1YiykuF6ZmQgDKh+W9BBk8A=
Subject key identifier:   E0:66:0D:85:6F:BD:CC:D1:E9:3B:43:03:25:7C:E3:C3:00:35:FE:FA
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F43285844FB60002A5AAA20C0F0A860C0
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        147.124.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:00:2a:5a:aa:20:c0:f0:a8:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=33a4e378-44fa-4735-bed9-52503d3bf62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:94:bb:9d:75:31:f4:f8:f1:45:ff:59:3a:
                    f9:da:f4:b4:a8:e7:bc:52:96:68:53:99:71:b2:e0:
                    3d:42:72:34:97:61:35:43:f6:a8:ae:d0:49:30:d4:
                    41:84:a3:0a:1b:86:7f:e3:5f:be:b5:66:20:ab:c0:
                    c5:91:4c:43:59:94:2b:eb:19:49:95:31:e9:6f:36:
                    17:96:10:89:2b:3f:86:b1:c6:33:8c:9b:3e:f7:fb:
                    b0:c4:d0:d1:0b:a2:0b:c5:f3:22:d6:65:02:c2:58:
                    68:43:53:82:ad:0e:6e:e5:65:ba:c5:b2:60:15:16:
                    11:50:50:58:94:4e:a3:0b:00:4e:4f:6a:d8:01:4c:
                    9e:1b:46:0b:13:67:0f:68:1e:3b:6f:77:33:55:a5:
                    9c:37:62:dc:6e:61:b1:9e:fa:24:6f:6b:28:e0:dd:
                    9b:61:d1:70:67:3e:f1:17:9a:2f:55:cb:68:da:c2:
                    44:b0:67:3d:78:a8:f6:c6:1e:f9:c1:d9:15:86:74:
                    69:83:fa:15:7d:d6:c1:2b:be:39:89:f6:19:13:17:
                    ef:92:b4:26:1c:cb:2e:9f:3f:dd:1b:f4:db:98:ef:
                    62:4c:ff:af:54:a9:5a:75:a6:fe:d4:c4:70:7e:a5:
                    40:07:c1:9e:52:ec:6d:5e:99:c3:d3:ba:00:2d:39:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:66:0D:85:6F:BD:CC:D1:E9:3B:43:03:25:7C:E3:C3:00:35:FE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:92:de:e1:35:c5:04:a1:72:cc:8b:5f:eb:6e:69:43:a0:
         30:14:c3:02:9a:f1:94:07:e9:1a:38:19:77:2c:53:e4:58:bb:
         9c:2c:51:28:4d:e5:76:0e:88:87:06:c6:3f:d4:e9:98:29:0c:
         92:9e:89:54:f0:98:d6:93:91:ca:8d:48:89:aa:78:84:24:68:
         60:3f:f7:81:18:88:4a:1e:7c:b4:3a:95:31:8f:47:4e:db:84:
         53:ff:9f:5d:98:b3:3d:c9:59:40:5e:d7:3d:a8:0f:fc:06:ba:
         49:7a:3e:de:92:28:c1:58:bf:98:c7:d9:40:7a:56:40:ad:d3:
         6a:99:ff:3d:66:5d:90:2c:76:5e:f3:38:72:91:0e:23:ec:6e:
         da:0f:81:af:26:5f:a6:c9:c8:b6:db:21:7e:90:0b:be:55:30:
         14:13:c9:95:8e:28:ec:89:9e:39:58:97:ee:8c:c7:c2:e7:dd:
         dd:60:09:5d:d4:3b:c1:5c:7d:a6:60:88:25:27:3e:b3:5d:cb:
         f7:d2:4e:71:0d:6c:29:8b:0b:6e:fc:96:10:e0:ae:78:f7:ae:
         be:76:8b:3b:19:2e:f9:00:a8:d6:63:7e:01:4f:ea:74:64:64:
         3f:4c:0d:55:e6:5e:74:1b:68:d4:74:20:6d:6f:e8:42:13:85:
         f2:1e:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:26 2024 by rpki-client on console-ams.rpki-client.org