Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa
File:                     eca7232d-7a20-3978-b1ca-25de49ecce91.roa (raw, json)
Hash identifier:          KJqjAUjcqcMUlGj43e9WPJ4BRN2o2fNukeMVWFZNtGM=
Subject key identifier:   D9:24:59:0A:D8:60:B5:0A:BB:BC:51:C8:59:F5:58:60:5E:68:12:16
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285845A9BE1D04AD5373539DC5FB58
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     13984
IP address blocks:        209.151.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1d:04:ad:53:73:53:9d:c5:fb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=39e012dd-c92f-47fe-9149-73f6111c26d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:34:77:b5:09:d9:89:75:1f:d5:4e:8d:91:
                    b7:bb:9f:37:97:a4:1a:e4:c7:6b:a1:7a:98:75:52:
                    21:76:97:81:70:68:4f:57:72:66:a8:74:21:d2:f8:
                    87:50:aa:d7:ad:81:89:57:e8:91:07:79:44:40:09:
                    de:8c:d2:33:db:5e:a4:0e:8d:ba:ca:b8:31:0e:c4:
                    0c:2e:e1:6c:b1:ba:2c:00:04:3f:95:42:c5:f3:96:
                    62:8b:c2:a4:33:5d:ee:d3:57:cd:d2:6e:74:d3:ea:
                    f1:06:61:0b:ac:23:31:d8:a2:40:bd:7c:ef:9c:9f:
                    d3:f4:b3:2b:fe:17:d7:a9:f0:5e:d4:28:85:e7:a9:
                    f0:4c:4c:41:d7:ae:10:01:8f:b7:68:b8:cf:38:d2:
                    c5:61:98:1c:40:ef:51:7b:8f:7f:5a:df:1e:70:2c:
                    9a:38:e6:fa:9b:f2:5b:8c:90:4f:f4:e1:4b:dd:cb:
                    9f:89:9d:23:b6:ef:62:b5:fc:ac:58:9d:cd:bb:27:
                    ea:34:94:4d:aa:06:e4:fa:66:09:49:0d:b9:2f:d3:
                    38:90:2a:cf:21:95:d5:fb:b3:48:e2:06:36:40:32:
                    0f:3c:1e:0a:28:f2:36:83:b5:25:a4:41:21:27:6b:
                    05:50:9e:21:f3:d9:f2:37:56:54:9b:fa:d4:14:c9:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:24:59:0A:D8:60:B5:0A:BB:BC:51:C8:59:F5:58:60:5E:68:12:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:40:8e:82:2c:6b:50:2d:48:f3:bf:1c:2d:0b:48:74:2e:0c:
         fe:03:19:49:cf:f5:ec:d2:60:b6:96:e3:e6:8f:c5:68:6f:9d:
         82:8b:ad:73:d2:e3:50:dc:78:d9:ec:41:47:76:11:2d:06:e4:
         29:56:0a:7e:08:e6:b4:f2:77:7c:76:eb:da:9d:d0:40:1a:59:
         2f:76:75:d1:73:d1:1e:ad:a9:92:60:0e:92:01:d6:c6:9b:a2:
         2e:47:c6:8b:23:d0:80:ad:14:2e:fc:76:f1:08:4d:79:b3:63:
         76:e3:f4:af:a6:89:fd:f2:bb:37:e8:6a:6d:71:e9:1f:bf:6a:
         54:d6:21:f0:14:b5:53:26:9e:b8:d0:dc:1c:52:ee:9a:d7:28:
         dc:ee:eb:1b:fd:6d:05:78:0d:7f:db:6d:3e:09:bc:e3:be:83:
         73:92:dc:02:34:58:0c:6c:23:9f:df:c1:25:e9:2b:e6:e7:11:
         79:3b:72:dd:31:d1:0c:75:35:19:fe:6a:39:7f:61:e9:97:99:
         a9:c9:03:1b:d6:34:06:31:88:b5:74:fb:c3:c3:9e:31:c4:eb:
         69:32:f0:43:1e:f0:79:a4:93:bf:b7:d0:a2:ab:7a:6d:ef:98:
         e1:91:e9:af:9f:be:91:24:6a:2e:67:c2:af:e6:ce:96:5d:15:
         07:87:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:49:02 2024 by rpki-client on console-ams.rpki-client.org