Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa
File:                     7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa (raw, json)
Hash identifier:          VjkfhCtBXv98edY1wdtNep/GO/+QNiztaLj7w3ILK14=
Subject key identifier:   F8:BD:88:41:FB:35:5F:2A:BA:28:15:75:76:4E:86:20:FD:CC:17:E5
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285845410D5122F76CDF8E06ED40C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     7029
IP address blocks:        209.142.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:51:22:f7:6c:df:8e:06:ed:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=cc4fa65a-e537-4c7e-96cc-0c3500944f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:ff:cc:b3:bd:bc:1e:81:6d:4b:28:7f:04:
                    3f:c4:33:6a:80:21:a5:7c:83:3e:94:46:4e:a6:3f:
                    56:13:83:af:c0:49:9f:7f:b4:0e:ad:de:3c:36:d2:
                    dd:85:8e:b2:3e:47:66:47:0b:19:34:23:ad:6d:4d:
                    5e:1b:50:3c:50:31:11:aa:f4:65:12:d5:66:74:f0:
                    31:de:d9:fe:53:59:a5:fb:5b:2d:b8:b3:e5:00:5d:
                    ca:8c:61:a6:a0:dc:d7:1c:45:67:78:0e:33:11:d6:
                    db:1d:6e:ad:86:d0:12:7a:84:c3:9e:5e:d7:bf:6b:
                    06:8c:5c:b1:62:4b:0b:7f:6a:e3:0c:33:09:6f:e5:
                    f8:05:ff:3f:7e:0f:93:e4:73:2b:ef:d7:3f:bf:90:
                    12:b9:d8:0a:af:46:60:6b:e6:4d:d9:b8:17:af:48:
                    d8:c8:21:c2:d8:25:cc:81:25:6d:29:a9:be:a2:ed:
                    eb:ec:96:c3:19:83:05:15:36:7e:c9:fb:70:5f:9c:
                    ce:cf:95:26:6e:6a:d3:7e:3a:f0:2f:64:4a:ac:f3:
                    f5:55:f9:84:db:c0:a0:d4:26:8f:76:3e:59:d1:07:
                    dd:b3:38:97:d6:6c:75:85:02:ff:05:c1:35:6f:22:
                    86:5d:06:23:14:c4:fd:a5:25:43:b1:23:45:49:b0:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:88:41:FB:35:5F:2A:BA:28:15:75:76:4E:86:20:FD:CC:17:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/7e48d7bf-de4f-3cb7-979e-2a2b474f4a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:4f:68:5b:74:1b:df:9f:47:a7:e5:71:a2:64:de:9a:a3:
         49:f2:64:c7:4c:75:32:ed:91:d1:dc:d2:36:a4:3d:9b:61:2f:
         b4:af:86:ec:2e:f0:22:52:11:13:d6:18:82:77:18:5a:27:5a:
         03:33:6a:a1:dd:f7:33:f7:c1:88:07:90:50:d5:37:c2:b9:89:
         81:41:33:d0:27:82:e6:76:9e:bd:6d:81:75:d2:b1:e0:2b:07:
         3d:61:06:29:6e:5c:0a:1f:8e:c0:3d:87:73:38:af:72:89:7c:
         0d:ac:7a:01:7d:00:2f:de:f9:71:11:6c:20:3d:d6:aa:a2:70:
         a5:77:33:fd:8d:56:03:fc:7d:74:25:65:25:55:80:52:83:85:
         73:3a:d1:cd:78:9c:94:34:ef:39:ed:f7:76:ae:28:c9:a2:7d:
         77:4e:5d:95:18:18:2c:3d:5f:87:69:54:c7:13:45:f6:fe:2b:
         14:95:46:2d:a3:ae:7a:10:1a:49:4c:71:be:9f:3f:11:3b:32:
         0f:85:c7:23:76:4f:cb:4d:f3:86:3a:a2:b9:1e:50:1d:f6:ff:
         43:0c:d7:99:44:b1:01:ae:e3:83:0f:25:94:55:2a:31:c5:0b:
         fc:e8:0f:82:6c:31:a7:de:76:70:e7:89:ed:cf:f8:bd:40:cc:
         ff:d4:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:32:24 2024 by rpki-client on console-fra.rpki-client.org