Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
File:                     559bd815-2f54-3ec2-9322-c904668bbbce.roa (raw, json)
Hash identifier:          mQiyIvV3FzP1S2dQ7gCoJJlxZNbhZHLEl9DFLDrzfZM=
Subject key identifier:   CD:00:93:46:48:5E:C3:3B:F0:AA:B7:6A:55:E4:8A:F6:EE:AC:46:30
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F43285844FF901D81C357D3BCA0AC5920
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     7029
IP address blocks:        207.170.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1d:81:c3:57:d3:bc:a0:ac:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=c91a26a1-2f65-4ec0-9a06-a1dc8d24e790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:52:54:78:65:aa:e0:a0:6f:3e:bb:8e:05:
                    22:8c:87:de:1c:75:3e:75:63:8f:e1:0b:74:e5:e8:
                    05:8a:07:f5:2d:9c:8c:30:90:25:cb:40:13:ad:c0:
                    55:51:66:ca:2d:99:87:4c:6a:70:0c:95:ce:f6:74:
                    97:c4:59:9f:23:4c:22:35:f3:3f:55:98:ef:87:ec:
                    0a:29:65:b8:a7:d2:25:99:08:75:80:b1:14:96:75:
                    50:72:3e:19:8a:4e:48:f1:cd:14:71:ab:31:20:c2:
                    eb:d7:bb:d7:d7:0f:79:58:6d:93:c5:95:e4:8b:9e:
                    39:b6:17:bf:eb:ea:cb:fe:95:b1:b8:4b:03:b8:53:
                    e9:0b:d4:1f:7b:85:b4:5a:b3:8e:25:77:2c:d9:fa:
                    80:0f:37:d5:83:8b:fc:f1:e3:52:9b:99:09:c0:ae:
                    af:fd:44:92:ac:4f:d1:9b:ca:d0:6d:af:f9:0c:65:
                    75:20:22:4d:87:0b:f6:e9:6d:af:fc:17:29:6a:d8:
                    92:8b:86:79:a4:0d:9a:a7:b4:fa:55:b7:e5:e4:52:
                    ac:8a:4e:f9:19:2a:2b:c4:14:7f:d5:c1:5c:e7:c5:
                    c1:44:26:4d:e4:1d:47:a8:51:db:ad:21:70:8a:99:
                    93:90:ca:27:aa:8e:12:99:3e:0a:38:42:73:87:24:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:93:46:48:5E:C3:3B:F0:AA:B7:6A:55:E4:8A:F6:EE:AC:46:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:6e:7a:b2:41:44:77:6b:a1:65:ae:c0:4e:a1:4c:c9:f0:
         df:2e:b1:cb:af:eb:e3:75:a1:bc:76:f3:d4:9a:9f:89:ba:d4:
         bd:df:8c:15:51:7c:c8:e8:02:18:26:f7:91:f8:ee:5c:fe:e9:
         ac:e9:d7:42:4a:4e:2b:55:ce:ef:2e:9f:63:b5:1a:7b:80:83:
         47:2c:c4:45:8d:97:0a:40:67:15:a9:d6:d1:f4:93:33:38:d0:
         a0:ab:6c:59:c3:22:15:9e:5d:d7:34:5a:c7:fb:49:b0:a9:bf:
         a2:62:a7:45:fa:f1:bf:db:ef:d4:da:b6:26:41:70:46:24:24:
         2a:69:d7:e5:1b:42:03:e4:38:d2:a9:d6:22:41:13:1e:b1:20:
         6a:25:26:e8:fa:23:71:f8:ee:41:7b:95:d0:7b:3c:a3:8a:22:
         6d:b4:5e:e0:c2:f2:93:1e:c6:d8:c8:f8:14:a2:39:c7:24:13:
         ce:3f:62:8e:9f:06:76:28:ab:3a:85:23:22:6f:4e:af:c4:d7:
         af:7b:a0:10:e4:81:de:19:00:de:bc:0c:04:3c:0d:0b:5b:79:
         04:7b:50:e4:0c:99:a0:10:87:bb:6b:90:06:a4:f7:a8:51:66:
         a9:fe:12:3a:c2:e9:3e:a1:f2:c9:87:65:40:a5:80:5a:43:65:
         90:7b:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:38 2024 by rpki-client on console-fra.rpki-client.org