Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa
File:                     c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa (raw, json)
Hash identifier:          16r2tiZMgn+tSjezcDbNPfzwG947TWX2BdzuXfW70kU=
Subject key identifier:   F4:2C:47:2F:0D:09:8D:7B:B4:BC:90:4D:2A:04:52:17:DF:1E:88:5D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458C6DD52800F71C1DB4F89800
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     20454
IP address blocks:        108.170.43.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d5:28:00:f7:1c:1d:b4:f8:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=9a18a82e-f807-407f-bfe7-bb49a02c926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:7a:99:93:a9:6b:a7:d3:25:55:b6:4d:14:
                    71:49:36:d6:e4:e7:13:c8:32:56:70:0e:12:f4:5f:
                    7c:73:43:83:4c:3a:a2:9e:05:dc:4a:d8:45:86:9e:
                    e1:59:8d:1d:f2:23:5f:40:86:98:08:38:ce:02:79:
                    9b:d6:fc:10:29:7d:cd:16:98:eb:44:77:d8:a2:0a:
                    65:79:42:83:12:18:80:44:da:ba:a7:e7:20:9b:e9:
                    07:46:ef:39:ac:e6:14:e8:9d:a8:0a:78:07:ae:2d:
                    16:da:68:27:ee:8e:4b:14:e8:6f:9d:15:5c:7a:c5:
                    b6:ec:c8:7f:5b:5d:10:94:bb:52:ab:41:b9:10:d3:
                    8b:c5:6a:62:8e:e6:91:67:e1:4a:a4:1d:57:bf:e9:
                    2a:d7:11:c0:1a:72:db:16:17:33:30:5c:d5:72:03:
                    58:48:02:7d:91:5b:d2:d0:36:ff:17:74:59:d4:83:
                    ee:20:1c:b5:e1:d3:fd:04:9d:40:3c:c2:a0:58:d1:
                    65:a8:9c:1f:86:1c:ca:5f:10:ca:29:18:d2:85:00:
                    95:8c:39:a8:cc:53:5d:7c:56:7c:c3:b3:a6:d5:d8:
                    0a:6d:a6:62:34:0b:f9:e5:3e:ee:75:34:48:cc:ad:
                    37:e6:de:9b:1d:9e:20:21:9c:27:a4:49:b9:00:23:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2C:47:2F:0D:09:8D:7B:B4:BC:90:4D:2A:04:52:17:DF:1E:88:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c07c714a-fc86-3d71-ab93-aa4412ec1db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:18:ce:9e:f8:38:e3:27:7a:eb:7e:2b:be:9c:ee:64:89:
         f5:b6:91:17:cb:97:fd:a4:d4:39:8b:09:ac:45:72:c9:d8:69:
         e0:88:b3:c7:9f:47:5b:79:23:86:87:79:d0:35:05:72:e9:f9:
         45:96:4a:cf:47:3d:55:9c:0f:cf:0a:38:23:4e:6b:dc:bc:06:
         cf:6d:d9:9c:00:34:b3:28:11:7d:ad:ac:f7:22:fc:f0:5d:08:
         94:45:7b:4e:9a:7b:a7:e8:eb:3c:bb:81:9b:60:5f:ab:d3:5d:
         c6:9f:0b:22:00:47:1e:32:ac:8b:d1:ca:06:46:24:5f:21:aa:
         05:51:9c:04:b0:f4:34:c3:c9:4e:09:55:2c:9e:21:bd:64:8b:
         a7:a7:b4:f1:aa:32:51:7a:d4:55:ea:39:68:f3:8c:80:6a:99:
         a5:58:24:f1:1a:4f:77:ea:bc:8f:c7:9e:df:59:09:bb:44:f2:
         fa:2d:a4:dd:15:55:19:2c:c0:6f:e4:de:c4:2a:04:5f:cd:9a:
         f8:61:a3:4c:b2:eb:9d:85:c8:0c:5a:96:f3:19:ee:5e:cb:56:
         42:16:fd:a9:21:5c:0b:4c:5d:31:09:ce:24:80:f7:49:01:1e:
         98:2d:05:ba:1e:74:b7:87:94:46:7b:dc:03:d5:f6:3c:0b:7f:
         82:5a:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:42:10 2024 by rpki-client on console-ams.rpki-client.org