Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/6957487a-0d28-34f9-b018-102e97e7a1ed.roa
File:                     6957487a-0d28-34f9-b018-102e97e7a1ed.roa (raw, json)
Hash identifier:          ADK59SgP9Dwu1OClevsi/XdeV30okqXlsEzXfEeNmtQ=
Subject key identifier:   08:75:0B:9C:1C:18:25:37:CC:74:E1:51:D4:7D:48:09:35:F6:38:47
Certificate issuer:       /CN=23dc136d-a5d2-43dd-b20e-5edff7bd04c3
Certificate serial:       010D0C9F4328584551CD6B0D8111B8A71DD2A340
Authority key identifier: 64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/6957487a-0d28-34f9-b018-102e97e7a1ed.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     212238
IP address blocks:        199.127.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6b:0d:81:11:b8:a7:1d:d2:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23dc136d-a5d2-43dd-b20e-5edff7bd04c3
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=cb28ab37-7e41-4cdf-8e73-89af979146f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:1a:96:79:70:e2:58:df:48:eb:7d:dd:78:
                    13:70:96:21:58:35:13:be:0c:38:f9:f6:44:0a:5b:
                    17:3b:26:5e:4d:a2:f7:0e:27:b2:33:bc:42:af:12:
                    6d:20:8f:b8:a4:ad:f8:30:a9:77:f5:43:24:e2:e4:
                    be:9d:7f:db:ae:8a:df:8a:0c:7b:9b:19:ce:87:89:
                    dd:f2:7b:08:4d:04:05:b6:d9:44:41:4d:cf:2d:df:
                    e6:8e:2a:a5:ea:44:28:c2:8f:73:06:24:b1:b2:ae:
                    d3:b3:a3:64:ea:41:af:0b:6e:ec:bc:e3:21:34:f6:
                    5e:18:b5:26:08:c7:6a:81:27:fa:cd:4c:40:0f:42:
                    ee:22:ef:9a:44:3f:43:48:e5:52:60:1b:35:db:fa:
                    17:d2:c7:0f:dd:5d:de:54:12:be:29:48:33:23:f5:
                    3e:4e:e0:db:6f:f7:1d:aa:7f:18:f0:e3:c5:b0:38:
                    15:91:31:78:16:0e:c6:9e:93:b3:64:14:3e:8f:8e:
                    c7:c5:17:4f:f7:ee:2a:9c:fc:07:62:51:21:00:5d:
                    f7:6b:00:cb:2f:c0:31:76:4f:b2:da:6d:66:79:a3:
                    c6:8b:fe:05:73:14:8a:9b:6d:95:97:86:a1:63:66:
                    66:18:27:a7:df:bf:25:7e:f8:84:f7:47:94:2f:60:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:0B:9C:1C:18:25:37:CC:74:E1:51:D4:7D:48:09:35:F6:38:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/6957487a-0d28-34f9-b018-102e97e7a1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.crl

            X509v3 Authority Key Identifier:
                keyid:64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:80:5c:49:99:d7:fe:ed:ef:bb:34:77:05:a6:cc:6f:20:
         01:7a:81:90:f1:52:bf:c0:c3:5e:e0:e6:3a:81:cf:25:d8:5b:
         03:e8:52:f2:a6:6b:64:a0:b1:98:72:96:87:97:e3:24:31:48:
         1e:19:e7:59:37:b8:16:17:19:3c:be:6d:c8:4f:e4:0b:f2:24:
         fc:1b:4d:ab:2c:1e:c4:85:73:af:fe:85:da:72:d4:1e:f4:51:
         4c:a4:66:17:65:ea:c9:ca:d5:42:45:1a:84:98:37:15:b5:45:
         7f:9e:88:60:0e:1c:b3:cd:45:64:aa:65:41:88:0b:d8:82:0b:
         9d:4f:d3:dc:b9:6f:ac:ee:a3:74:dd:b9:a0:ea:46:5c:f0:ab:
         a3:e1:08:36:11:62:24:82:f2:e9:47:fd:7f:64:ca:b7:46:c5:
         fa:ff:72:77:e5:4c:48:ee:a3:50:bb:57:6b:5a:bd:e0:05:32:
         64:f6:ba:e3:7a:26:4a:57:7a:33:8f:e7:ba:6d:75:da:b8:12:
         11:ff:71:e7:18:40:f2:4d:be:d5:b7:89:30:da:23:2b:9d:bb:
         47:f5:5a:7b:ba:50:47:3d:b1:6a:48:07:bc:d5:3f:c4:93:01:
         2a:e5:18:78:4f:70:8b:59:6f:2e:a4:b5:b8:e9:76:73:47:c8:
         a8:ed:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:43 2024 by rpki-client on console-ams.rpki-client.org