Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa
File:                     977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa (raw, json)
Hash identifier:          xgjSrXX/X6jBk7jeOucib7rPCiaPUbLk7TRSXolRzJw=
Subject key identifier:   D7:EA:AB:39:84:DB:17:D3:32:06:44:47:0D:FD:E2:CA:4B:16:CE:5A
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F43285844FF9019E4FA0AE45EB6DC8100
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     7029
IP address blocks:        207.170.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:19:e4:fa:0a:e4:5e:b6:dc:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=23385cfd-b13e-4138-a168-9beae198c3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:3a:77:1d:06:ad:3b:2a:2b:02:69:19:82:
                    90:ec:e4:a9:59:52:0c:32:f5:32:ed:49:b7:c1:a7:
                    0c:c8:c1:bc:cc:bf:b1:b3:16:79:94:91:41:64:e1:
                    87:b1:70:9a:81:f5:e3:64:cd:a7:d7:3f:d1:6c:ea:
                    8c:7d:9d:86:d6:df:e7:0a:c6:d4:1d:8a:7a:54:cf:
                    1f:ef:e7:8f:1f:62:64:88:d1:be:81:e9:09:70:d5:
                    80:19:5f:4c:f2:52:5f:a7:99:d3:63:ef:13:06:86:
                    1d:7b:75:82:58:e2:17:f1:fb:87:c1:e8:b9:58:14:
                    c0:47:dc:30:2b:38:e6:0b:47:aa:54:9f:d1:b7:7e:
                    49:20:a0:c2:2d:a5:bd:f7:25:7b:d7:06:82:7b:0e:
                    00:e1:46:b3:a7:a4:c4:12:b4:a1:7a:aa:3d:9d:76:
                    a2:f3:0e:fc:de:dc:ca:49:15:76:f2:d7:74:a5:fc:
                    24:d6:c8:5f:74:f1:3a:3c:db:f7:49:6a:94:72:6b:
                    8e:f2:f4:5e:3b:77:39:70:37:c7:a6:63:3f:58:ed:
                    06:b4:01:ba:5e:a7:62:94:b3:81:d3:3a:f9:d1:6c:
                    8e:31:b0:e7:d6:0e:04:d1:67:6e:19:ea:92:40:92:
                    39:4d:64:0a:ad:48:9f:c0:02:83:19:19:ee:a2:e8:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:AB:39:84:DB:17:D3:32:06:44:47:0D:FD:E2:CA:4B:16:CE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:01:bf:a8:51:38:12:12:03:0a:f5:33:4c:7d:6c:a8:14:05:
         7e:83:f7:e1:5b:58:62:7b:1e:7b:2f:42:f3:68:c5:ce:2b:35:
         07:b1:86:2f:34:55:3a:8b:c6:72:61:65:a5:71:fe:3c:4a:e7:
         49:8f:34:3e:f4:06:06:ce:b7:f8:1c:45:c2:a1:54:52:dd:70:
         ff:c0:1c:de:72:73:75:aa:69:80:d8:4f:44:db:fe:00:28:1e:
         d2:ba:0c:ff:ee:b0:fc:c2:c0:d9:89:7b:89:00:0a:fa:c2:10:
         28:52:bb:31:0c:3e:ca:74:02:e5:8d:a9:70:a1:fc:02:76:14:
         8c:b3:9d:2c:70:2f:e9:50:2b:86:ca:67:19:ac:09:3c:81:8f:
         ea:00:eb:65:b9:ce:75:22:53:9e:1b:75:fd:ba:01:a7:f0:d5:
         53:c9:28:ac:94:94:f5:1e:85:66:bb:1f:d2:2a:03:bd:03:11:
         1e:54:c5:21:73:7c:0b:8b:a3:6e:ad:1f:83:37:a5:a3:7d:a0:
         54:a4:3d:66:f3:be:e4:77:fe:13:f6:ad:8a:e0:11:f6:09:3e:
         13:cd:bf:eb:fc:cf:8e:26:63:79:f6:5c:60:1f:d3:2a:e8:95:
         40:6f:ce:b5:f1:c1:d8:a5:ad:65:1c:c7:f6:13:10:4b:11:73:
         4a:3e:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:27 2024 by rpki-client on console-ams.rpki-client.org