Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa
File:                     ddea0208-9f25-3934-9c14-a7d7eda22304.roa (raw, json)
Hash identifier:          m82cgciDudRZrCfj0pecyKrZ+Rw1/dLwbkCPHeas0+0=
Subject key identifier:   8B:69:3E:7E:51:23:4A:DF:CF:B8:7A:F7:E2:64:E0:0A:45:D7:8B:A3
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285845E88E6C52FBC6EADDFF7B0C00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa
Signing time:             Sat 18 May 2024 01:00:27 +0000
ROA not before:           Sat 18 May 2024 01:00:27 +0000
ROA not after:            Fri 16 Aug 2024 01:00:27 +0000
asID:                     271
IP address blocks:        209.87.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e8:8e:6c:52:fb:c6:ea:dd:ff:7b:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : Aug 16 01:00:27 2024 GMT
        Subject: CN=e29fddeb-d13b-4f66-98ce-561b11375aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:8c:b3:9a:93:dd:8e:29:70:a4:9b:c5:7f:
                    c2:4d:1b:11:3e:75:3e:ea:f8:94:e8:10:9c:37:73:
                    55:9f:43:db:57:05:cc:ce:ad:b8:0d:b1:f6:5e:c6:
                    98:57:6d:aa:be:6c:38:6c:2c:dc:04:eb:7e:59:be:
                    8c:a5:8e:65:31:6c:8b:5a:98:09:16:ab:d5:79:a6:
                    41:67:39:94:67:02:e0:06:a3:89:01:c6:b9:96:41:
                    b6:4a:8d:b8:54:1f:22:6d:60:6d:f2:b9:25:7b:da:
                    52:91:49:6c:dd:88:9b:f8:d7:cc:6a:e4:bd:5f:b4:
                    34:09:db:34:b9:bf:0e:b9:40:d9:b1:e6:cd:ce:da:
                    ba:b5:f3:2f:8e:33:62:a4:8b:3d:e5:53:9b:21:38:
                    65:da:9d:32:17:3d:e4:af:65:37:22:bd:43:bc:5c:
                    7c:6b:bd:d7:12:b5:cf:47:84:56:8f:0e:26:0f:f8:
                    f7:59:08:40:69:53:12:3c:c2:b1:c4:67:c3:69:64:
                    a7:d0:ed:89:d7:f4:1d:12:13:53:fe:c1:ef:5f:c5:
                    82:b4:47:80:c5:7b:29:14:4c:ae:a5:73:a7:32:25:
                    f1:b1:51:b2:b4:33:81:99:4a:a4:3b:98:9d:de:4d:
                    9a:34:37:7a:72:9c:d2:bb:bd:3a:db:91:41:8e:c8:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:3E:7E:51:23:4A:DF:CF:B8:7A:F7:E2:64:E0:0A:45:D7:8B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:76:22:ce:b9:af:05:7b:2f:a6:7e:cb:43:99:cb:e9:6d:60:
         ad:46:c7:13:f3:53:a4:05:c2:05:35:e8:7d:ca:9e:36:d8:c8:
         96:5e:bf:57:e8:e5:5c:fa:62:b5:97:73:c8:07:49:6e:83:eb:
         71:8f:c6:f4:6e:9b:44:f9:36:60:e0:84:d9:e3:f7:e4:18:d0:
         16:e2:66:15:63:0c:d6:1b:e9:7a:12:a1:b8:d1:8d:da:89:ad:
         76:56:e5:5e:28:93:d7:99:a0:fd:60:bd:08:45:26:dd:df:b7:
         8e:49:c8:e4:c3:32:19:43:a4:48:f1:2a:85:86:82:0f:d7:be:
         9a:16:54:fb:dd:5d:0f:5f:9f:7a:3d:63:3d:0d:cf:8f:d0:db:
         87:58:23:62:67:97:cd:98:89:3d:57:09:d6:9b:28:5e:89:58:
         5d:58:f0:89:72:44:c3:06:8c:27:64:fe:3c:a2:b9:56:a7:92:
         12:79:ef:e1:92:5d:bc:17:71:78:e6:dd:0c:88:91:10:79:e0:
         6e:39:87:8b:fe:ae:a1:d2:4d:fb:1b:a3:0d:a1:6a:0a:a9:e3:
         27:e2:0a:99:02:25:22:65:81:15:89:57:af:65:81:24:2c:8f:
         49:7d:2d:13:89:4d:b0:43:69:1a:ae:d7:0b:44:26:75:e2:82:
         a4:bb:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:59:51 2024 by rpki-client on console-ams.rpki-client.org