Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
File:                     50d0d793-6a99-3887-8de8-7232deb74b36.roa (raw, json)
Hash identifier:          5cb10NW731/PVWCiQjIpODzXHeSO7Rkk0NQ7jnBrAUk=
Subject key identifier:   F4:BD:FE:43:F1:B4:6E:02:02:04:E8:8A:76:B7:2B:73:22:F2:55:57
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858457AC7B749C87AC2EFB014ECE8
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
Signing time:             Mon 08 Apr 2024 17:17:06 +0000
ROA not before:           Mon 08 Apr 2024 17:17:06 +0000
ROA not after:            Sun 07 Jul 2024 17:17:06 +0000
asID:                     271
IP address blocks:        207.23.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:c7:b7:49:c8:7a:c2:ef:b0:14:ec:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  8 17:17:06 2024 GMT
            Not After : Jul  7 17:17:06 2024 GMT
        Subject: CN=64f8bb2a-a715-4b3b-b6c5-ab01b38d793b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:f3:a4:59:02:3b:d2:85:c4:e0:49:ba:96:
                    49:22:29:42:f6:0c:4d:3f:a8:33:c2:16:93:e1:72:
                    32:25:fb:18:21:d8:51:d7:ff:eb:12:a2:a8:90:66:
                    bf:47:aa:e0:da:e8:15:43:ad:9d:1c:83:3b:8b:80:
                    ee:e0:a4:04:5e:df:0d:af:4f:85:e2:d8:71:48:42:
                    b7:a0:95:18:64:85:92:57:6f:a8:a7:65:16:34:7c:
                    cc:d1:78:dd:ca:c9:10:7c:8a:f0:cd:39:dd:93:24:
                    41:4b:f7:1b:d7:46:a5:ad:7d:95:1b:6a:e6:41:e3:
                    6f:f0:d5:ce:f8:dc:3e:d4:ef:36:38:f2:d4:39:4c:
                    1c:72:30:72:ed:04:a0:34:5d:37:05:85:75:13:79:
                    52:89:ef:f1:4e:b6:57:4a:02:6d:8b:b5:ed:c8:08:
                    97:f9:70:fa:d6:9b:4d:00:b2:03:ad:17:b0:67:83:
                    04:a5:99:46:fa:04:84:10:a9:91:69:93:aa:9a:ea:
                    63:1a:df:c7:e5:f2:08:6b:8e:92:0a:c3:16:df:b5:
                    21:e0:49:23:da:77:af:d7:47:cc:79:a9:e8:ca:ae:
                    ef:0d:e3:f3:35:3e:1b:80:db:09:06:2d:78:15:31:
                    76:21:5c:f7:9a:a9:6c:7b:f5:de:fe:b4:20:41:98:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:FE:43:F1:B4:6E:02:02:04:E8:8A:76:B7:2B:73:22:F2:55:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7f:ea:82:aa:bc:53:3d:bf:58:cf:ea:5f:8b:a4:07:1f:9a:
         90:e8:cd:9b:e3:79:86:9f:9f:38:45:90:75:86:90:32:da:24:
         ee:2b:9e:8f:77:f6:69:20:c9:ae:98:2d:8c:09:72:0e:1b:4d:
         1c:94:3a:4b:3e:26:32:27:39:bf:7f:f7:b1:b9:85:54:2d:b0:
         29:1b:b7:24:a4:11:e4:16:20:08:40:03:2f:ce:b2:be:d0:10:
         52:df:37:27:e6:30:a2:ad:35:34:7c:56:9d:02:1f:e1:d3:71:
         a7:c1:2f:28:5a:d8:84:aa:1e:72:8f:8d:86:3e:f8:0f:58:6d:
         bd:9b:b7:7e:93:59:b1:c2:66:b4:50:1b:ef:73:fd:5e:d3:03:
         1f:88:af:16:e5:31:b5:6a:c0:08:4c:34:a6:a8:06:d1:91:27:
         7b:91:57:f8:c3:4d:7a:be:66:61:0b:ae:8b:7b:71:05:95:2f:
         10:f8:7d:25:92:10:e0:97:24:68:30:f4:08:a8:f4:df:61:b8:
         3c:41:de:2a:48:bc:f7:c9:81:c3:7d:85:3a:e1:02:2a:1b:28:
         95:1a:e6:b2:f9:06:1a:4c:cd:a0:ee:3f:b7:0f:d0:de:66:f6:
         4f:ce:15:76:71:10:e4:a2:d4:12:eb:fe:e0:e5:a1:04:49:a0:
         2f:27:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:39 2024 by rpki-client on console-ams.rpki-client.org