Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa
File:                     c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json)
Hash identifier:          Bc+vQQAVZAOKovBHAELqhDuV0YBTmhOJn7O3aA+X0ps=
Subject key identifier:   E8:83:A4:18:D7:F0:FF:14:A8:07:37:F8:DC:E4:5C:94:C7:1D:8B:FD
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EC66CE3C2DA0D8325080
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     16409
IP address blocks:        207.114.32.0/21 maxlen: 24
                          207.114.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:66:ce:3c:2d:a0:d8:32:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=9a914c47-bed3-4409-a69e-ee1afb4a90fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:11:d0:e2:f4:18:75:f1:c6:d1:c8:a4:6f:
                    a3:f9:cd:fc:b9:5a:81:47:f1:53:c2:b9:5e:ef:4c:
                    b8:d2:ef:7a:64:d4:52:87:09:25:90:59:12:b7:d9:
                    dd:05:f9:f9:cb:6d:0b:b0:25:8a:ba:c9:d8:43:ae:
                    95:4f:3d:8a:bd:c6:64:d7:4f:47:19:4f:0b:22:3a:
                    b8:1d:ce:99:62:ad:1b:21:23:14:d8:e4:97:02:7f:
                    23:86:90:d9:71:6c:3b:38:1e:dc:53:62:a4:54:8a:
                    4e:d5:a2:20:1f:96:8f:be:47:20:ac:b2:7b:5f:53:
                    3e:bc:31:7b:fe:78:88:e9:07:06:bc:b7:b3:4b:e1:
                    43:22:10:b1:2d:20:70:89:16:a6:cc:47:97:7f:a4:
                    5c:c1:1c:6f:a9:97:cc:d0:98:fc:c4:cf:ad:5c:f0:
                    f9:8b:2a:24:30:fb:28:d2:78:28:58:af:91:f3:de:
                    a5:cd:86:af:bb:7b:1b:92:b3:d7:37:11:c7:59:da:
                    bc:0b:f2:64:32:94:b7:4c:77:33:7a:04:c6:38:b4:
                    e0:74:1e:ea:53:fe:1c:4b:97:1d:58:48:93:be:9f:
                    b0:63:3e:1b:63:dd:95:19:9a:c9:3f:d3:d4:0c:5a:
                    49:22:95:61:d5:25:0a:94:95:47:b2:cd:2d:67:3f:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:A4:18:D7:F0:FF:14:A8:07:37:F8:DC:E4:5C:94:C7:1D:8B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.114.24.0/24
                  207.114.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:bf:63:80:2a:2d:8e:4a:5b:61:1d:2d:74:44:27:d4:94:
         b9:99:48:9a:6b:08:e0:1f:4e:e8:a8:ae:75:6c:87:36:d2:1f:
         32:b7:84:14:37:bc:13:27:59:12:ae:7a:08:c3:13:48:31:e6:
         e4:23:56:06:78:a8:c9:70:85:4d:ed:45:04:0a:12:d1:9f:36:
         05:dc:9f:f4:3b:ba:ce:3d:d7:be:60:77:e6:7c:0f:4c:d7:f6:
         cf:8a:c7:7b:db:fb:82:fd:b8:73:b0:95:4a:d5:e2:56:36:e0:
         c9:c3:d8:e9:27:27:56:d4:35:d6:ee:2c:ab:1f:ba:67:a9:4c:
         7f:ff:de:c3:02:d7:1a:47:52:7a:1c:ea:95:2d:10:7b:04:26:
         e9:57:12:67:10:3f:33:ef:2c:a7:a7:3d:0b:a1:2b:db:1b:e4:
         8b:cb:30:83:64:c3:0e:33:31:5e:2a:09:85:9c:eb:6a:df:17:
         37:c9:8c:1c:d7:09:ca:12:a0:ef:7c:bd:6c:57:a7:51:dd:79:
         50:7b:cf:bc:17:75:b1:14:c6:a1:06:44:65:a8:94:d0:34:f7:
         e2:48:73:9b:de:4e:d9:96:f1:95:c0:7b:15:66:df:4d:62:bc:
         ab:94:e5:e7:25:b0:96:1e:eb:3f:32:ee:14:ff:d5:b7:80:f7:
         b0:2d:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:56:53 2024 by rpki-client on console-fra.rpki-client.org