Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa
File:                     efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json)
Hash identifier:          Wim6AGR+qwr7104mZINIDrjcW46W80gYhPutALDLuEA=
Subject key identifier:   77:9B:0F:04:61:01:6A:BA:9A:23:2F:D5:1D:32:38:08:FD:59:3C:E6
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858452EE7EC1609A766191BCC1680
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     40836
IP address blocks:        209.114.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:16:09:a7:66:19:1b:cc:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=d1225b93-625d-4971-a06b-2e5365edd0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:5b:4e:dd:e9:51:a8:ea:56:5c:53:80:2c:
                    13:db:cf:9d:c5:7a:5b:88:08:34:ea:cf:1a:4e:c8:
                    3d:d4:bb:83:37:ab:bc:0c:f0:80:ee:05:0e:dc:8f:
                    ec:04:d1:3d:99:98:f1:cc:b4:e5:ee:b0:b8:0f:e0:
                    f7:0e:d8:b9:4d:87:24:30:a2:fa:d5:f5:5c:75:6e:
                    86:36:af:18:f5:5b:40:32:8a:da:98:28:e5:a0:51:
                    a7:68:5c:7f:c7:f8:f1:ce:c0:de:9d:a4:3e:3d:ab:
                    eb:ee:a1:08:bc:bd:8c:47:1a:24:c6:bd:8d:2d:f0:
                    25:e8:03:36:58:b9:84:fe:b7:c8:aa:06:ad:db:3e:
                    b1:c8:40:e7:e2:c5:d6:b6:64:8a:1f:fe:32:14:6b:
                    20:f2:83:7d:81:ae:06:42:60:1a:dc:09:6e:63:51:
                    88:37:1b:7a:fd:57:0d:ef:0b:07:4e:bc:c8:a7:4f:
                    27:02:48:04:37:63:bb:ad:a0:c4:cf:e3:88:a1:e0:
                    26:3c:ec:05:1e:de:3f:b0:2f:8d:d7:fb:7b:91:1d:
                    3d:f6:2f:60:72:a9:eb:f9:84:64:25:c0:df:02:bd:
                    fe:41:69:fe:3d:c6:fe:e2:7b:ab:61:f0:41:3f:4d:
                    36:7f:0e:23:b1:68:c7:fe:6f:d3:ea:9a:8e:48:bb:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9B:0F:04:61:01:6A:BA:9A:23:2F:D5:1D:32:38:08:FD:59:3C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:92:89:82:92:ff:3b:c0:e2:60:69:1b:49:a9:16:70:01:
         99:84:10:0b:76:4e:4e:7f:6b:53:e7:3c:80:d2:9d:09:87:66:
         85:ed:73:ab:32:e5:44:24:c5:b2:53:03:eb:de:2b:ad:8f:19:
         0c:9d:c9:87:bc:45:1e:0b:03:c4:2b:d2:2b:7f:04:65:1e:8d:
         83:cd:91:7a:35:9f:58:49:b6:e0:dd:1a:9d:7d:1d:f0:de:d0:
         5a:6c:e3:f0:a0:5b:9e:31:57:1e:69:f5:9a:83:eb:6c:a2:19:
         87:de:75:66:2d:60:c2:f0:bc:71:a3:ef:de:f0:02:c3:f8:2a:
         aa:90:cc:f3:1e:b4:87:e8:0d:df:76:10:d6:70:ff:42:24:19:
         4b:b7:e4:0c:fd:82:48:63:83:e8:f4:e9:29:6e:d9:9e:65:36:
         11:57:3a:54:00:53:8a:be:e8:9d:13:db:ec:87:82:62:ff:f0:
         d0:f3:0d:85:8e:fd:f9:82:82:a0:dd:ca:df:8f:27:ba:1e:75:
         3e:27:46:c2:5c:26:4b:9d:28:4e:c2:ce:37:96:cf:ee:f0:2a:
         52:e2:76:8e:53:1f:27:18:1f:03:39:9c:d1:ef:ca:86:b2:e5:
         de:94:41:a5:58:92:3e:12:90:d3:e8:81:9d:fa:54:28:d3:86:
         83:7c:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:38 2024 by rpki-client on console-ams.rpki-client.org