Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
File:                     2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa (raw, json)
Hash identifier:          xqZyYLrLYnO+7fw3MWWWBQTUS1QYnduXgrMmrV5YLk4=
Subject key identifier:   28:4A:71:56:42:94:B2:58:68:65:2B:99:2C:5F:F2:21:AB:07:FF:47
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F432858457A4872EFD1F210FB783C4B00
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        167.124.105.0/24 maxlen: 24
                          167.124.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:72:ef:d1:f2:10:fb:78:3c:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=e7b7052c-9bdb-4001-b362-242989ce7c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:95:8f:bf:5b:cd:4d:b3:b6:6a:25:4d:7e:
                    ff:1f:62:bf:5a:d1:65:7a:ba:8f:3f:2d:9c:2e:d8:
                    cc:4d:6a:d2:3e:70:29:3d:8c:39:1f:7d:bb:78:f9:
                    80:2d:d1:47:b9:79:12:65:a9:93:24:a6:12:9e:88:
                    70:a7:b6:18:ce:3d:96:fa:6d:8c:97:61:26:f2:fa:
                    b9:0f:44:ee:05:9e:61:93:bd:f0:52:03:34:e5:3d:
                    bf:22:7e:42:c3:44:0d:fd:46:5e:9d:18:a4:0d:a1:
                    38:8d:ee:0f:d3:55:9c:88:a3:fa:12:0f:7a:ca:84:
                    e3:cf:90:65:76:69:a9:21:44:c0:bc:96:73:7b:46:
                    85:db:32:09:84:d0:b1:43:f5:c7:63:de:fe:19:7f:
                    1b:ae:24:a2:27:f7:a1:f3:49:d6:a1:6a:88:35:7f:
                    f7:61:9a:58:15:28:3f:00:83:e0:11:51:7d:26:5a:
                    a7:30:50:44:f2:68:da:ae:47:7f:94:be:1d:bd:e9:
                    e2:fd:e0:b3:4b:a5:60:f7:a8:27:f9:6f:02:94:6c:
                    e5:d7:37:7f:2a:55:97:79:5b:7e:47:a8:a9:47:38:
                    4e:bf:4e:7c:71:13:5c:70:b7:7a:70:31:a4:12:86:
                    e6:1d:b9:64:a3:24:a9:b6:b2:f3:f0:db:77:74:32:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4A:71:56:42:94:B2:58:68:65:2B:99:2C:5F:F2:21:AB:07:FF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:8a:28:7f:ca:ca:36:c0:ef:07:45:2b:98:e4:50:1a:a0:
         de:30:01:a1:fe:a0:ac:e5:45:ca:d3:07:4a:db:92:ea:1c:6e:
         6b:2d:39:1f:6c:c7:4d:7f:df:51:9d:47:73:d3:26:8e:41:a4:
         94:39:d4:c8:01:41:0e:8f:eb:57:18:07:17:e2:31:ea:37:dc:
         2f:54:b2:0d:20:68:ce:07:8c:14:89:d8:5e:a8:fa:5d:43:e7:
         ac:52:f2:31:f4:b9:dd:3f:b1:a4:64:3a:d8:64:44:20:a4:41:
         8e:dc:47:d7:59:57:d6:3a:8d:6e:9a:48:10:d4:b8:36:03:24:
         ec:a8:3d:c5:f5:74:94:0b:cb:96:6e:68:7b:76:44:2b:a3:af:
         af:d7:ed:9e:f2:17:3d:4f:aa:bf:cb:6f:75:d7:c0:ce:a2:37:
         6a:56:3d:74:a1:78:50:1f:fa:34:d5:ff:f5:42:2f:9c:55:ff:
         0f:62:d1:11:78:61:f3:ea:d2:d5:e2:01:6e:e5:b1:a1:d7:1c:
         ff:b3:1b:ce:fe:19:af:1a:af:23:30:d8:54:d3:a0:4b:fb:11:
         14:a4:d1:26:25:5e:30:b3:10:db:98:ac:68:69:72:54:65:22:
         b0:bb:23:6e:e1:76:ab:13:e6:05:9f:9a:a4:1a:ec:9a:09:8c:
         64:0e:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:33 2024 by rpki-client on console-ams.rpki-client.org