Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa
File:                     323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa (raw, json)
Hash identifier:          ahOiIpHQr3P74TG9LL11FlulOXRxsCv+HR7xbowFsUs=
Subject key identifier:   EC:97:F7:FE:39:46:EE:B2:44:2F:65:FF:6A:FD:87:BA:04:FA:F7:37
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F43285844F0354EAC180A50C61ABDC650
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        207.170.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:4e:ac:18:0a:50:c6:1a:bd:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=f784bd01-ad55-4e6f-bf7b-7e6899fd7d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:a2:b6:45:11:5f:d3:81:2b:7b:f9:44:2f:
                    38:88:04:6f:f5:50:4e:6f:16:4c:5f:85:89:e7:3c:
                    71:86:d7:86:08:b4:e6:59:e3:86:e2:60:d6:41:d0:
                    76:1f:f3:44:46:73:ac:0c:59:a5:5c:a0:3b:c7:7f:
                    2b:05:05:cc:b5:ed:ee:67:46:b1:37:9a:72:af:12:
                    f3:05:ef:49:18:f9:b5:3d:2c:33:f5:14:ca:c3:c6:
                    da:f0:ae:53:87:21:7d:eb:42:2f:d3:57:92:d3:2c:
                    0c:bd:9d:3d:d2:96:e6:a5:80:a2:e1:b0:d5:b3:56:
                    9b:81:3b:de:0b:c8:81:1c:5a:95:4d:cc:7d:56:13:
                    bd:a6:54:ea:14:94:97:6c:56:33:22:54:e9:ff:9e:
                    52:fc:91:1c:8a:42:ce:da:b1:a8:ac:c7:7f:2e:01:
                    db:e3:71:23:9a:f2:9b:1c:96:e6:76:8f:c6:07:ce:
                    57:cb:78:c4:7d:47:f4:7a:f4:d4:77:29:8c:b9:ba:
                    a3:b7:0c:cd:1a:cb:6e:11:9b:d0:70:65:b8:21:1f:
                    e8:1f:3b:17:54:6c:e0:69:46:71:ea:5f:a1:0f:b4:
                    06:19:4a:da:1c:d6:8f:fe:ef:18:8d:23:55:da:2a:
                    3e:08:51:90:82:7e:e5:e4:cc:fa:4f:18:55:b3:d3:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:F7:FE:39:46:EE:B2:44:2F:65:FF:6A:FD:87:BA:04:FA:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:02:a0:83:92:83:74:bd:20:b0:d6:d0:03:4a:30:32:e7:
         01:8a:d0:08:ba:70:7d:7c:8b:11:bc:9f:7c:0d:d5:1e:48:d7:
         9d:a6:b0:8d:23:74:71:ed:44:43:aa:46:8a:ad:f1:86:27:06:
         13:69:f3:7d:2d:9b:75:b1:57:d5:8e:2f:d8:7d:09:da:fb:2c:
         03:54:9d:7f:cb:90:c2:ff:f2:ce:88:89:80:be:85:38:ac:f5:
         4f:a7:9c:26:9c:37:83:59:34:d2:47:8a:50:f5:ba:9c:4e:c8:
         be:b4:1b:2d:d8:50:80:eb:fe:98:03:b7:1d:60:d4:da:e1:e6:
         b2:1b:5a:35:ae:ba:39:9c:d0:4a:1a:7d:dd:72:dc:ce:05:56:
         16:43:ad:b7:98:36:37:4e:fe:f1:07:c9:a4:60:04:e5:58:9d:
         00:c3:9d:a3:e6:21:60:93:63:3c:95:99:8f:ff:a5:ff:45:10:
         b7:0e:32:7d:82:97:6c:72:49:0a:68:28:7e:05:8f:73:ce:0f:
         c6:c2:96:ed:40:8f:46:0a:50:63:2e:6b:03:2b:19:3c:76:99:
         57:15:f7:77:c9:68:b8:13:72:fe:e7:b2:07:a8:66:3b:ba:af:
         2b:5b:de:1d:23:e8:b0:52:a8:6d:a5:e3:42:13:bb:76:ba:33:
         c6:14:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:27 2024 by rpki-client on console-ams.rpki-client.org