Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
File:                     a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa (raw, json)
Hash identifier:          C7a+Xh5UwkIJ7z0UNfSl7qoT8hxDPmhvWD9KAgWVzHY=
Subject key identifier:   EC:69:DD:0D:D1:64:E8:DF:42:CD:DD:EA:44:DA:EF:6B:7F:23:7C:A1
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F4328584523DAF848335B4CD0296B7D80
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f8:48:33:5b:4c:d0:29:6b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=fd559791-d97e-43aa-a6a0-6b87fb86deea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:c0:e0:39:d8:2b:02:a8:20:42:dc:b7:06:
                    15:4c:97:a3:a7:96:c9:d5:ae:b1:cf:c3:1c:eb:29:
                    08:7b:e8:a7:88:ab:fa:2b:db:11:c9:13:12:ad:cf:
                    c7:76:19:cb:21:91:d4:c2:07:c6:8f:eb:a2:36:bb:
                    b3:0e:95:37:b6:6c:ef:ae:39:d7:09:21:50:3d:9d:
                    cc:c9:f6:5a:6d:1a:fe:06:ec:c5:18:78:c1:da:c8:
                    11:bc:b8:bc:ea:76:0f:5f:cd:70:2a:f9:bc:63:42:
                    c2:85:a2:ca:57:5e:e8:e6:a1:7a:db:b0:76:11:4a:
                    98:92:87:ed:58:69:81:25:15:f4:d4:12:f2:b9:1e:
                    e5:cd:18:de:fc:85:72:d6:18:11:83:de:30:b4:1d:
                    48:48:6c:d5:a7:01:19:77:dd:0d:41:dc:a3:0c:a8:
                    0d:e5:84:1d:d8:7a:99:a7:3f:80:1b:71:4a:a3:5d:
                    1c:df:17:97:6d:1f:0f:c4:1d:4f:35:e3:c7:35:66:
                    78:bb:43:22:b2:e6:d6:b8:13:e3:38:ce:bf:25:61:
                    31:3a:dc:9f:5b:a2:26:d1:58:d5:91:54:29:65:07:
                    19:43:49:12:d9:7b:9d:29:70:50:0d:c3:92:2b:37:
                    87:fb:00:f8:bd:96:48:7f:3d:77:9f:3a:7d:57:90:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:DD:0D:D1:64:E8:DF:42:CD:DD:EA:44:DA:EF:6B:7F:23:7C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b3:2b:23:41:b5:06:49:48:a8:a6:44:d0:15:7c:9b:d7:ce:
         bc:c4:28:93:e6:16:8d:32:69:27:02:6e:7b:20:70:1c:74:e6:
         c2:ed:21:ed:19:6d:2f:5e:4a:96:09:00:9a:38:2d:d0:08:ac:
         65:23:53:56:77:59:14:bc:eb:2c:67:5d:7e:e9:d8:d6:3a:77:
         4d:ee:53:18:de:98:ab:ab:db:1c:c9:e3:2d:9c:f1:78:54:6f:
         b0:5f:e7:8c:ba:97:bf:c6:2c:2a:e7:f9:03:f1:8b:d6:47:9a:
         95:04:74:72:e3:9b:20:8e:38:06:37:06:ce:30:b0:33:35:73:
         4f:50:1a:89:cb:2a:89:a6:4f:f2:95:d9:58:28:5f:c1:b9:a9:
         de:e5:16:81:b7:77:d3:98:d8:41:10:54:3c:1a:81:85:8b:14:
         62:9d:38:44:0f:7c:d0:8f:e6:36:fc:91:f7:73:be:3e:a2:d4:
         3d:f0:e8:d5:5a:17:ea:6c:cc:68:7d:93:71:5b:51:88:80:40:
         de:fe:ac:32:84:ec:d1:b3:79:f7:c1:dd:2c:e2:89:75:50:cb:
         40:75:3b:06:0a:10:53:2d:c0:f4:a3:c5:12:bb:25:12:21:c2:
         a4:29:88:b2:4f:d3:af:c3:4f:b9:12:ef:8f:63:7f:f6:0c:8f:
         11:4e:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:17 2024 by rpki-client on console-ams.rpki-client.org