Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/7ed77f24-2dda-3618-9e2f-6d9f52aec196.roa
File:                     7ed77f24-2dda-3618-9e2f-6d9f52aec196.roa (raw, json)
Hash identifier:          PDY4SyGlqQY1ZRlsTmuK1/GQaTX4RRgd/RKRlYLfUwA=
Subject key identifier:   ED:E9:01:56:82:4B:0B:94:14:30:C5:9B:A9:40:30:F9:18:08:EA:20
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F43285845A428AE8A02076D94EBDB7500
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/7ed77f24-2dda-3618-9e2f-6d9f52aec196.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     9919
IP address blocks:        107.155.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ae:8a:02:07:6d:94:eb:db:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=faf5d7e6-7d78-4da7-87f8-92c64c145d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:6f:28:cc:32:08:c8:31:7c:12:dc:9c:21:
                    63:b0:d1:ab:8f:0e:1d:14:5a:ed:eb:f1:f0:9c:e4:
                    f2:60:32:4c:66:2e:09:9a:d7:91:1b:5d:45:c3:58:
                    df:bd:01:e3:dc:e2:cf:bf:32:3e:7d:96:e5:00:32:
                    35:12:35:f6:18:03:c8:14:1f:5b:04:6c:d1:ef:d6:
                    8e:94:a5:8c:72:09:57:a2:98:af:b8:cd:50:cd:f8:
                    f0:b6:0f:c2:6a:99:ea:79:4c:75:df:fe:37:a3:03:
                    03:20:08:4e:80:f9:d3:00:b7:8b:15:b5:5e:4d:2e:
                    6e:7f:fe:a3:d5:67:59:90:15:a7:b6:5d:66:23:f9:
                    d9:52:1f:ec:fe:4d:f5:16:b3:db:bd:28:45:18:5d:
                    5a:b4:a7:2d:13:79:b6:f7:a8:0c:72:ad:80:81:66:
                    ff:ac:c3:85:8a:3b:c0:34:21:7f:84:6e:26:23:52:
                    25:8d:12:b3:92:2e:81:c4:ef:55:56:e3:ed:65:73:
                    cb:85:49:87:25:bd:81:41:70:7b:08:8d:2e:d8:9b:
                    77:61:69:26:50:cb:02:14:b3:03:c4:ad:7a:4f:20:
                    63:ac:85:45:95:d8:bf:ec:b8:bb:2c:a8:d5:93:56:
                    23:76:88:cb:df:64:b2:67:80:eb:7c:ea:aa:04:a6:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:01:56:82:4B:0B:94:14:30:C5:9B:A9:40:30:F9:18:08:EA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/7ed77f24-2dda-3618-9e2f-6d9f52aec196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:ab:d5:37:d7:47:f8:9a:76:65:03:63:c1:46:42:d3:da:
         91:ab:13:39:68:f3:66:16:3c:91:eb:e9:da:0d:13:32:4d:37:
         a2:33:b3:16:48:71:c7:ff:8f:5d:92:6f:fe:cd:cb:a1:8b:fa:
         fe:0c:a6:4a:6d:b2:83:ee:b2:5f:2a:5f:80:1e:a5:c5:79:44:
         01:b9:d1:91:98:6e:a2:46:e6:7c:f6:77:b0:3f:7a:c5:8e:e5:
         59:8f:45:02:67:7e:d2:67:89:66:58:56:b9:ed:2b:fd:ba:6a:
         b1:9f:99:97:29:ca:16:1c:80:e9:20:0f:e7:51:bd:af:e1:f4:
         1b:b8:a8:6c:40:d0:99:dd:92:37:93:8e:54:75:43:dc:84:6a:
         8a:c9:c4:f7:69:15:06:79:b9:c2:35:0b:55:8a:69:c6:03:88:
         e4:e9:ba:af:89:8c:b6:18:bb:1e:a3:b4:2e:7f:b3:59:c6:29:
         c8:08:bd:2c:52:bf:b1:f7:31:d9:44:a8:02:9c:b9:b6:07:5b:
         c6:1d:4d:c4:c7:e5:bf:34:42:36:f5:8b:8d:dd:65:22:49:ef:
         fd:bd:9a:f0:8d:dd:7c:5f:52:6a:08:41:6e:83:d0:6a:e3:51:
         b6:0c:a2:d4:7a:e3:c0:6b:10:e3:ce:58:e1:5f:30:5b:1d:9d:
         bd:4d:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:32 2024 by rpki-client on console-ams.rpki-client.org