Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
File:                     12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa (raw, json)
Hash identifier:          wgCKcrIMD9YtzFc+oXcfZxLoYzWI0lwVNcsDu2wrU/U=
Subject key identifier:   16:A1:EB:F7:94:13:96:B6:0E:83:36:46:0A:BB:3B:9F:60:8F:65:59
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328584507F0278699C2E885A2079DC0
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     7029
IP address blocks:        207.170.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:27:86:99:c2:e8:85:a2:07:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=7c9ff711-b910-40f9-834c-06013c33b08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:85:dc:08:1e:94:5a:6e:35:bb:79:3c:2b:82:
                    03:4c:54:6b:fd:c7:12:9d:46:a7:58:97:6e:42:d9:
                    ae:de:28:9a:48:ff:61:cb:81:00:d0:eb:12:06:75:
                    f8:ad:57:0c:65:34:80:d6:4c:2b:f1:eb:11:1c:43:
                    ed:4f:a4:d8:a4:f6:c8:ca:2e:cd:9c:aa:8a:f1:0e:
                    dd:f6:86:9d:df:e2:b5:58:a1:18:1b:6d:94:9f:ae:
                    7a:db:5f:37:62:b1:f4:1d:67:e9:4f:bc:ae:19:7c:
                    11:81:b6:26:39:5a:77:d8:42:ef:95:0f:e1:3f:1c:
                    af:99:f7:29:22:d5:10:47:88:2d:5b:f6:7d:be:e8:
                    aa:f6:ae:9b:74:57:4b:ee:75:b3:ec:20:b8:c5:c6:
                    65:66:6e:a4:32:51:74:05:97:32:42:5f:5f:8f:8d:
                    02:4c:29:b5:b0:bc:fa:40:f3:fd:3a:d3:f4:1f:20:
                    23:2e:4f:a8:31:08:ce:1f:9c:d1:e4:5f:ac:d0:68:
                    51:db:2b:2a:56:bc:9e:43:3c:f0:27:2d:f9:0b:fa:
                    77:ed:3a:a8:d1:45:08:4d:4d:0f:71:40:67:fd:17:
                    67:02:94:42:d1:05:4d:11:0e:7c:30:27:9d:4e:7a:
                    91:a2:4b:58:c2:7d:7d:bc:48:8c:eb:03:71:90:9c:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:EB:F7:94:13:96:B6:0E:83:36:46:0A:BB:3B:9F:60:8F:65:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:cf:6b:f8:94:91:51:31:d4:19:35:0f:04:0a:48:e1:b0:
         4a:cd:95:7c:11:32:ad:25:52:ec:fe:37:d8:12:f8:f4:10:92:
         c2:7b:18:b1:bd:a5:d6:9c:35:13:41:93:f8:8c:e1:8c:dc:39:
         42:f3:a4:ff:ed:0a:46:44:f8:fb:bd:a4:4d:4a:4f:19:d8:ac:
         6f:da:e2:98:d6:a2:79:68:20:f2:67:47:0b:fa:ba:2f:52:6d:
         84:c7:7e:af:2b:48:b5:95:9d:13:09:b0:6f:7c:1f:95:43:54:
         dd:99:db:0a:fc:0f:6a:a1:d7:cd:fc:04:e3:91:ab:ca:6b:f8:
         f0:5e:21:51:aa:d3:02:55:e5:76:63:43:3a:fa:02:6c:ec:1a:
         7d:5e:34:cf:ef:72:a2:21:db:42:fd:a0:6c:74:50:71:78:96:
         46:97:fd:c6:67:bb:9b:11:4f:08:05:c8:7b:e2:a8:70:ab:c8:
         bd:c9:4d:13:95:95:fa:fd:2b:a2:78:0c:8c:6a:dd:60:ee:45:
         01:06:0e:6d:1e:22:47:0a:6b:f7:77:bb:ef:2c:26:19:da:64:
         74:9e:4e:d0:98:e1:8c:6b:62:f1:ba:58:a6:d9:a3:64:31:b3:
         cf:ea:f4:02:6b:51:d0:0d:a0:24:8d:4b:ba:04:45:22:a1:15:
         28:b4:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:38 2024 by rpki-client on console-fra.rpki-client.org