Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa
File:                     4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa (raw, json)
Hash identifier:          0KKPQS96/zBlm5ww9JGLV3j75LrDwItf4l6H1Wt8yrY=
Subject key identifier:   15:E6:45:80:E0:2E:EF:67:21:88:05:5D:99:A4:6E:AA:EB:56:8B:B4
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F43285845AC88CA269C57E9305C56B400
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        207.110.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ca:26:9c:57:e9:30:5c:56:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=3e26e496-d52f-400b-8f1b-a9acb036c873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:5b:ac:a1:54:29:01:9e:b5:f8:53:b1:95:
                    8c:fb:57:fa:33:a6:ab:be:12:fe:e1:25:47:94:5a:
                    0e:06:d3:b5:bc:c9:62:ec:16:20:2c:88:70:e7:56:
                    e3:4c:f6:8c:4c:a5:62:d8:82:ef:b3:9f:6f:24:e7:
                    6f:86:0f:c9:61:c3:2e:43:b1:d0:5f:54:bd:91:b7:
                    eb:4c:46:9c:a5:1f:7a:43:aa:5c:85:01:f5:ac:be:
                    6d:cf:5b:99:c8:04:e2:3a:60:6d:66:e5:82:5b:63:
                    9c:24:a7:da:d4:1b:97:ef:32:c1:bb:27:69:07:e7:
                    81:fc:66:30:16:91:4c:3c:40:df:7d:64:73:39:1b:
                    c5:eb:ee:1a:fe:1b:12:be:cb:30:84:48:ff:aa:bb:
                    0a:0f:60:90:13:01:a8:8c:a0:a5:53:d6:83:50:a1:
                    d9:c1:83:80:8a:38:55:b5:ae:1c:90:cc:e2:db:08:
                    9f:dd:ea:f9:e3:57:04:12:ea:be:5d:b6:02:15:81:
                    50:67:ec:2c:55:68:6b:3f:03:23:ea:fc:33:da:20:
                    15:69:03:32:02:80:5d:36:fd:2b:f2:09:fb:93:26:
                    8e:76:0a:fe:d8:96:86:39:9f:fe:fe:e4:8c:52:74:
                    db:0a:ca:2a:47:d8:6c:b7:fe:33:c3:a0:01:e4:fb:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:45:80:E0:2E:EF:67:21:88:05:5D:99:A4:6E:AA:EB:56:8B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:6e:8b:6c:8c:99:5e:de:58:ed:7f:fa:35:80:42:fb:65:
         38:0e:7a:61:6a:04:c3:5b:b2:7a:26:ea:ca:91:2b:39:d0:b1:
         89:ca:57:c5:c5:85:7e:b7:40:83:d0:1e:30:43:2c:8b:ae:6f:
         b2:ca:a9:e4:2c:2e:de:e9:d5:6f:09:c3:57:3b:3d:e9:66:5f:
         d0:3a:14:04:40:31:eb:01:39:44:62:66:6b:ac:d1:fe:bf:c1:
         9d:c4:b0:d3:6a:e6:be:d3:be:cd:2e:92:fc:22:c5:9a:1d:58:
         44:59:82:46:90:63:6a:30:54:5b:06:3e:d0:8a:2c:f0:c1:79:
         51:e4:23:d8:a6:ba:e3:1f:73:a9:5d:81:4f:8c:f0:17:54:0b:
         4b:fc:e0:1e:69:7f:42:21:d3:c3:64:ff:10:f3:3a:2c:d9:db:
         e8:79:21:d7:7f:f6:c6:b2:20:b4:17:1e:d0:20:af:b1:52:cb:
         1f:d0:d5:07:18:7e:3e:43:b6:3b:89:ba:42:1d:77:8a:fa:4b:
         f1:00:8d:e9:85:34:5f:1a:55:96:b0:2e:fc:46:7b:2a:6f:dc:
         e9:de:5f:9c:4f:66:8f:b9:f5:21:54:c0:49:1b:8f:43:ea:0d:
         36:08:9c:86:29:a7:a4:05:63:24:c6:71:45:f6:be:f7:fa:fc:
         82:b4:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:21 2024 by rpki-client on console-ams.rpki-client.org