Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa
File:                     4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa (raw, json)
Hash identifier:          RGpkYVerUv55KuuioiBpzEkJQDDMUF2qY+HjO7Az1gQ=
Subject key identifier:   2D:B8:3C:36:06:6D:3E:95:0E:4E:9C:62:3B:B2:F1:68:81:0B:78:26
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845EF89322802E804B1FCF9AE00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     271
IP address blocks:        207.23.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:32:28:02:e8:04:b1:fc:f9:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=1c77933a-6c00-4bb3-b544-4f68f2fe0e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:6c:1e:c5:3b:12:a4:6d:c2:0d:7f:22:f2:
                    98:21:78:e4:fc:06:f2:79:13:3f:0e:5f:99:82:ad:
                    87:1b:3f:e8:e8:1c:c9:98:f1:36:d7:1f:6b:7a:a0:
                    0f:fd:67:cd:2e:e3:93:a7:da:02:63:66:9a:fc:91:
                    28:a2:ac:e7:8f:fa:22:fa:e6:65:65:03:b7:19:27:
                    3f:6f:84:24:da:2c:2a:0d:ef:7c:d2:50:c2:fa:14:
                    36:86:37:6c:3f:b2:ac:73:34:50:00:f3:d8:50:0e:
                    83:2e:17:27:52:3f:a5:f9:77:5d:29:3e:db:26:27:
                    39:17:3b:02:49:41:5f:b0:9a:ef:e7:81:72:78:b2:
                    68:da:ec:55:6a:28:30:20:b4:28:dc:5f:5c:6c:fd:
                    bb:e5:5e:d3:08:db:d8:97:ed:15:3a:61:31:bf:37:
                    b9:d7:07:47:f4:ee:2f:06:c9:1a:a5:0a:44:0c:40:
                    ba:44:eb:6a:74:29:7e:e3:73:c2:1a:d4:56:ec:b1:
                    ba:39:28:55:7e:20:e8:a1:fb:23:78:cb:50:77:56:
                    b6:db:0d:61:3d:26:21:fc:76:9d:d7:40:61:8f:3f:
                    93:00:85:ad:2c:d3:07:66:69:80:85:69:5d:ae:fa:
                    e8:48:a2:07:cb:9f:cd:ac:19:fe:62:86:5b:78:45:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:3C:36:06:6D:3E:95:0E:4E:9C:62:3B:B2:F1:68:81:0B:78:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8f:b2:ae:36:ca:e2:35:b5:bb:3d:f8:c2:be:e4:19:d1:6a:
         58:77:ca:02:63:af:31:44:ad:9a:e2:d3:4c:76:15:66:84:b6:
         b4:36:b1:c4:e8:eb:64:3f:59:cf:4f:5d:b5:8e:8b:80:e8:ba:
         c2:b4:ad:7b:d0:4f:d1:86:dc:d8:78:54:f7:09:64:e9:97:ea:
         38:69:8c:4c:aa:bd:fd:f8:98:9d:63:4f:ed:1a:7e:76:fe:32:
         16:44:c5:af:bf:14:e2:7d:d4:23:88:b4:70:84:22:f5:9a:0d:
         41:e4:d5:82:1d:93:bd:bf:55:92:8d:bf:22:a1:3c:25:dd:dd:
         e7:76:ae:f9:6d:2d:4f:25:6e:02:ba:82:72:1c:5c:c9:fb:42:
         a1:bd:37:5f:e7:79:b2:e2:f2:e3:53:be:9b:a1:a4:94:0b:d6:
         b8:74:8f:b7:c0:c0:64:9f:76:ab:f7:85:69:37:16:2e:e7:72:
         ae:9b:22:01:d7:0a:7d:cf:22:53:db:a5:6e:ac:0a:6a:36:1f:
         ff:ff:d7:2d:4c:95:f6:65:63:ca:f7:f3:96:93:a2:76:91:f7:
         fb:ec:dc:3e:6f:c0:b2:b8:26:42:0d:b5:50:0f:b8:ce:94:f9:
         cf:e1:d3:db:9f:ad:b0:cf:f9:66:d8:cc:a7:08:2f:41:61:6e:
         5e:d2:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:44:40 2024 by rpki-client on console-fra.rpki-client.org