Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa
File:                     d8207238-f42f-3e03-914f-1208ebf45ac1.roa (raw, json)
Hash identifier:          x6wEzajtc5RUTQB+nxKInquw3UqKnBH5iIhyLTLW/8E=
Subject key identifier:   54:0A:85:93:53:12:F5:52:23:CB:06:F0:8F:D2:01:E0:70:65:6A:09
Certificate issuer:       /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07
Certificate serial:       010D0C9F4328584726D08EFA994C085F8BEBE900
Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     7029
IP address blocks:        207.90.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8e:fa:99:4c:08:5f:8b:eb:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=d395c8db-a7f8-4623-9249-b49d1c68d8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:ef:85:67:94:0c:ce:7b:2e:10:e4:65:cc:
                    bc:45:80:da:7c:ff:37:cb:16:1c:b5:91:58:e1:2e:
                    3e:15:aa:91:fc:9a:21:e9:40:75:24:57:bb:15:ce:
                    98:49:aa:1f:dc:69:4c:b9:a7:a5:9c:fb:31:66:2b:
                    3d:7b:4b:7a:17:2d:a4:70:53:42:fe:b6:d2:42:df:
                    8a:a1:aa:d9:6d:7e:0c:f0:f2:70:41:98:d5:dc:be:
                    14:d9:4d:75:03:76:72:b7:86:b5:02:d0:2b:c0:b4:
                    7c:b7:6a:51:3b:64:d3:6d:25:1d:7a:8b:c9:41:fd:
                    42:8c:40:1b:87:62:78:f6:a2:85:59:4e:d7:0f:d6:
                    23:9e:7c:58:53:8b:22:8d:5f:5d:5b:91:a4:e7:94:
                    01:65:08:f9:86:7b:d4:82:bb:b9:1b:2e:2a:2c:75:
                    fb:10:b2:f0:49:40:05:cf:b3:18:12:7e:6b:23:dc:
                    da:3a:bc:07:07:0d:39:b3:3f:2a:1c:4d:63:93:ca:
                    67:06:0a:40:a9:0d:e0:b3:90:cc:f0:07:20:fb:5c:
                    54:71:75:f0:42:0c:73:10:56:0b:88:68:ee:5d:cf:
                    5c:ac:03:e4:74:ee:dc:d5:f0:f2:b5:a2:f7:14:5c:
                    0d:b9:b2:0d:63:83:5a:4d:ab:d8:ed:13:d0:96:39:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:85:93:53:12:F5:52:23:CB:06:F0:8F:D2:01:E0:70:65:6A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl

            X509v3 Authority Key Identifier:
                keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:31:8a:ed:a7:1a:d5:70:a8:a7:5a:58:d4:e3:4e:ef:39:
         4a:c1:bb:0e:0f:89:f6:60:b5:1f:16:f5:cd:cf:c6:26:b4:9b:
         2e:77:57:95:22:c8:7a:6e:65:39:aa:b5:dd:20:69:ad:24:d4:
         5a:d1:8e:19:39:86:88:35:55:a7:8b:39:4b:6c:36:3f:2c:1e:
         13:cf:6f:d5:af:95:41:12:97:21:66:2e:e8:53:a0:83:21:66:
         54:ed:c2:dc:d6:03:82:d8:42:a6:79:f4:2e:b0:a2:29:71:55:
         46:7a:1a:3c:47:84:6e:e9:68:19:a4:27:5b:17:68:91:c7:e4:
         47:14:9f:f0:73:29:9f:4b:10:f9:0b:2b:de:94:bb:80:6c:d6:
         3e:84:1d:db:76:21:94:ee:06:c1:c8:78:b2:d0:cb:f1:08:c2:
         01:77:d7:5f:a7:f6:bf:8a:57:04:c9:3c:0d:86:c3:af:e5:37:
         d6:8d:61:46:2b:79:7e:0a:b0:ba:47:9c:c9:d7:30:62:61:24:
         27:9e:b7:55:26:0f:a9:34:e7:09:30:39:51:59:2a:55:a6:98:
         de:b3:78:1a:5c:26:a9:bf:36:ed:04:62:96:d5:63:76:bf:87:
         0e:06:95:e6:5b:dd:4a:e8:1c:a1:11:0c:67:bc:fe:b0:27:b6:
         3b:cf:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:04 2024 by rpki-client on console-fra.rpki-client.org