Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
File:                     c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa (raw, json)
Hash identifier:          Uzgp6gsdVKyD20CuF4g8Jvt6eBskwHawks6fezJMKpY=
Subject key identifier:   1C:C5:2D:A8:AE:51:76:ED:9D:3D:30:6F:D7:8A:2F:D7:52:25:59:89
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285844EA9FEB9AD0D0188C678D1900
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     11260
IP address blocks:        24.207.0.0/17 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:eb:9a:d0:d0:18:8c:67:8d:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=8ef7fe4b-9818-4932-ac4e-6d319c0bf679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:a3:0b:9b:16:69:cb:94:94:cf:98:63:c5:
                    66:fe:00:b1:49:43:2a:e5:77:33:dc:cf:60:73:15:
                    c3:b3:99:00:34:94:27:93:a0:43:e4:8f:b5:bb:29:
                    ba:08:e8:22:b7:14:34:96:7c:36:00:bd:64:47:d4:
                    c4:ed:e6:9f:d7:bb:f3:db:ac:bd:23:26:41:91:be:
                    57:88:d4:d2:fe:b4:25:32:4b:50:fd:b5:5f:b7:09:
                    29:60:7e:d7:40:21:1f:74:4b:23:09:d3:99:ab:21:
                    b8:99:83:57:f2:a1:59:b8:9a:b8:39:56:b8:b7:d7:
                    5c:d6:dd:19:37:ab:4a:b0:f2:2c:33:99:03:cd:a9:
                    be:d5:3f:7b:cd:b5:1c:d7:14:da:87:cd:92:8a:1d:
                    41:f2:28:f7:0b:ae:d6:94:66:20:86:e6:1a:c1:7d:
                    a6:a4:b1:9e:f6:ed:d2:86:b8:6b:94:9c:29:e6:bd:
                    47:33:0e:d0:c4:7b:66:e6:83:55:9f:35:8e:f9:c3:
                    33:cc:40:6c:1d:e6:e3:df:ec:c1:73:1b:dc:55:2f:
                    b4:35:90:ec:64:b3:6a:68:b7:ac:dd:74:9f:be:00:
                    d7:34:56:1b:d9:c3:d6:0b:34:59:c3:d9:a1:91:fa:
                    c7:c7:05:e4:7f:00:94:af:67:21:d7:16:50:ba:be:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:2D:A8:AE:51:76:ED:9D:3D:30:6F:D7:8A:2F:D7:52:25:59:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:d9:5a:fb:c3:fa:a7:be:aa:07:84:d4:c6:74:88:2f:d8:
         fa:b8:aa:7c:f2:3e:05:b9:d9:25:76:99:3c:5e:7a:bf:4f:ef:
         59:4b:ab:04:df:02:73:21:b5:ff:0b:5c:c1:b5:11:3e:bc:de:
         8a:2d:5e:6a:5d:3f:44:63:90:f1:e6:35:1c:f5:d6:c1:77:9d:
         c5:5b:52:9c:a0:02:69:3f:46:46:27:d5:68:25:be:53:5f:e9:
         d2:4b:ff:81:7b:ac:4e:73:5e:45:38:08:e3:e1:31:d8:54:a8:
         7b:74:2b:ed:1d:f5:d3:57:12:eb:11:58:7a:88:d5:cb:aa:fd:
         ab:da:de:ec:37:86:0f:d1:68:fc:84:7c:98:2d:c0:59:95:4a:
         dd:68:75:73:db:a6:3b:4d:34:95:48:06:25:93:62:3b:ed:7f:
         d7:5b:de:7a:50:be:2d:7a:a1:57:ae:0a:31:ee:4a:ae:b7:10:
         c7:ef:b7:0d:c2:72:f6:63:43:97:02:62:3b:bf:00:55:81:ce:
         b2:fa:61:12:34:dc:46:98:f8:a0:ca:08:aa:10:9a:7b:51:cd:
         4f:9f:12:e3:4f:be:22:60:4c:cb:f2:e6:48:cb:2d:37:ae:9c:
         94:cf:3d:3a:5d:7e:c8:9c:5f:57:83:a2:ea:50:98:b8:f1:e2:
         4e:e8:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:41 2024 by rpki-client on console-ams.rpki-client.org