Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
File:                     d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json)
Hash identifier:          9rCTmnRwLGV9t69RFylFayvokTWKygJXyPMW49ep7LI=
Subject key identifier:   38:69:BD:23:A3:6A:CD:45:DE:A9:3D:61:26:67:FF:88:FC:0A:85:A1
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F432858457FDDD4415614623856D428B2
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     101
IP address blocks:        207.231.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d4:41:56:14:62:38:56:d4:28:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=67e85549-01e0-4145-92c3-487bfabff397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:ed:98:b8:98:96:99:62:08:72:ff:08:ca:
                    cd:e5:08:4d:c2:15:0e:a5:55:05:99:25:d0:53:14:
                    34:82:2e:c3:44:22:6e:d5:d8:54:ec:98:9a:e8:ae:
                    da:29:fb:bc:e8:e6:05:3d:75:93:56:3f:e2:27:86:
                    ac:f0:76:1f:e9:9d:7a:bf:af:d6:30:5f:e8:e2:17:
                    6a:6f:2b:de:20:51:7b:69:53:06:fc:ef:bd:1e:06:
                    32:94:4c:ee:30:10:b8:ee:67:a1:26:6a:ce:96:2b:
                    2a:a7:ae:7f:f2:47:94:42:d9:f8:53:85:65:14:59:
                    47:d4:c9:bb:13:28:41:32:84:45:98:11:e5:26:af:
                    3b:0b:92:d0:d4:6d:a2:33:ee:ff:46:9a:50:08:03:
                    2c:b2:50:28:96:c8:0b:0d:cc:f5:80:a3:57:c6:14:
                    5f:fe:ff:b7:fc:f2:cd:39:4f:b1:ce:1f:9e:0e:d6:
                    f8:d2:72:b6:1c:18:80:1f:e0:8c:34:e2:eb:96:ef:
                    d2:34:25:b3:5b:31:2d:fa:ce:73:ce:c4:a8:82:a6:
                    c4:29:84:70:52:27:b8:a7:52:20:3b:04:b6:89:c6:
                    69:eb:a0:92:d1:94:25:a9:f0:65:5f:5d:70:a4:8b:
                    db:2f:cb:f1:ff:2c:26:7b:21:eb:76:e2:73:bc:66:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:BD:23:A3:6A:CD:45:DE:A9:3D:61:26:67:FF:88:FC:0A:85:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:4d:6c:89:57:fd:3c:8e:5d:24:1c:f5:62:b4:a5:92:54:
         81:8a:0b:c6:bc:42:78:66:5c:92:8e:14:d0:ea:d7:22:77:79:
         12:b6:b2:c0:9b:11:82:08:c7:f5:02:31:d0:74:20:44:a1:9f:
         5b:e9:a4:a9:50:61:4f:de:57:6c:d7:f0:db:cb:77:3c:28:04:
         e6:c2:2a:82:9c:dc:8d:e5:09:54:ba:42:c5:d3:11:74:9f:af:
         c6:90:47:a6:8e:02:68:5a:86:14:7a:db:c6:a6:0f:65:46:bb:
         b4:25:58:ec:67:d1:a4:d3:bc:ad:05:73:69:7a:36:b1:63:fb:
         13:0b:37:86:61:9b:01:18:b6:54:7c:0e:ba:6c:36:12:75:54:
         e1:23:55:91:87:cd:b1:17:83:6f:0f:1f:f9:83:56:07:8d:c1:
         d0:75:3f:3c:f3:01:06:7b:83:41:62:d2:13:f3:60:7d:79:31:
         97:b9:c7:ee:fb:4c:1b:d0:9c:04:17:40:43:87:b2:31:7e:8e:
         a0:07:37:05:61:1a:69:61:85:48:1d:49:a2:69:cc:5a:13:23:
         cf:57:b8:9e:88:6a:c7:68:e1:86:ef:01:ca:1a:fa:82:4f:ae:
         b7:73:e2:a5:43:0d:bb:c5:42:25:67:76:51:50:58:4a:d9:2f:
         9b:a8:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:47 2024 by rpki-client on console-ams.rpki-client.org