Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa
File:                     7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa (raw, json)
Hash identifier:          p9eoEMBoKYukZMXQQGXKs8QK/i+ZKInzJORzr4exnGQ=
Subject key identifier:   15:8B:67:31:65:8E:1F:23:F6:AF:FB:BA:CE:3B:F5:3F:4C:3A:FF:0B
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858453FA80881E2729E3D495B3A80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     11426
IP address blocks:        207.230.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:08:81:e2:72:9e:3d:49:5b:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=5ad1c5e0-2281-4679-9e0c-5892419f71ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:b2:76:34:3a:12:ee:b1:9d:1e:29:62:be:
                    2e:bc:5a:9c:df:04:1f:e2:3a:c8:31:70:0d:19:78:
                    27:dc:a5:b6:f1:8c:16:80:70:36:0b:a2:e0:da:90:
                    06:49:b5:3a:71:6f:e8:10:35:fb:ff:07:c1:77:81:
                    95:9f:13:62:e6:54:3c:c7:be:19:81:60:0c:48:bd:
                    1e:63:8c:d5:58:2a:0a:7b:a2:d2:58:3f:68:d1:76:
                    44:4e:14:28:d4:e4:04:e1:b7:bd:ac:2b:da:5e:da:
                    34:6e:4f:dc:1e:85:0d:17:ea:74:e8:bb:50:62:17:
                    44:c8:63:62:75:c8:9a:e3:7a:47:f9:08:ef:e5:b5:
                    8b:92:d3:19:f2:61:89:96:5d:00:f4:4b:5f:eb:37:
                    9a:b8:c1:24:21:45:23:bf:38:59:7e:fd:dc:48:cc:
                    ba:26:15:40:9a:e7:9d:9e:00:8b:c5:90:61:36:5a:
                    af:b6:e1:d2:58:bc:43:12:0f:26:7a:5f:4d:e4:a0:
                    60:3a:7a:e0:8d:8e:1d:02:d6:fc:0e:e4:ba:68:8b:
                    a1:d1:d9:fd:5b:79:d0:b5:b3:dd:90:d7:99:d1:ea:
                    06:77:32:e4:e2:a5:79:b6:1d:66:54:d0:ee:27:a3:
                    83:3b:cd:a4:af:20:c1:1a:16:59:cd:f7:c5:46:61:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:67:31:65:8E:1F:23:F6:AF:FB:BA:CE:3B:F5:3F:4C:3A:FF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:69:50:e0:77:25:90:02:14:1e:72:a3:55:3b:56:29:7a:
         42:92:7d:46:e6:d2:8e:00:26:27:cd:58:21:60:3a:d8:97:ad:
         97:3c:63:96:62:0c:1f:09:e5:43:78:b9:c9:26:b2:69:ec:1d:
         58:03:a1:74:73:e9:12:9c:11:ff:5a:9f:ac:26:0b:ed:60:4c:
         04:70:6d:a4:30:f3:58:9b:37:59:1d:d8:7d:07:ac:4d:3e:6f:
         d3:8c:04:fb:64:19:48:28:db:da:05:b1:25:ec:f0:b3:98:3e:
         c0:a8:5e:79:32:3a:fb:a7:2b:14:6f:d9:f2:29:64:71:c5:86:
         64:5e:c4:81:d8:c0:0e:1b:04:64:b2:3a:fa:7d:67:f9:68:10:
         61:fd:bb:f1:5d:1e:09:81:65:a3:dc:eb:8d:eb:66:fd:48:43:
         eb:ab:bc:ef:72:a4:21:bd:ba:b0:41:f5:13:78:0e:af:c1:52:
         70:61:b7:15:15:22:aa:6c:b3:55:5e:7a:18:2d:0d:52:7c:f4:
         2e:70:c6:79:e8:d6:7e:29:c4:0c:c9:6c:6d:73:e0:36:a2:5f:
         55:95:0c:7e:37:d9:b9:67:19:58:81:f1:7c:1c:7b:f1:b8:7f:
         7f:b4:84:d3:1f:2a:bd:e0:d7:19:44:02:cc:d6:44:c9:47:fa:
         13:9a:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:15:51 2024 by rpki-client on console-fra.rpki-client.org