Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
File:                     65d11a05-2769-3f82-a107-6def6f4c6ffe.roa (raw, json)
Hash identifier:          z7l2dyeakuXeTubnLS65ITal7H96ZPY24iJpLNx44ro=
Subject key identifier:   31:0A:21:A8:87:80:C8:51:A2:C9:20:6D:66:21:EB:82:D5:71:22:4A
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285845A15E10DC586FC7CF968485C0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        209.169.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:10:dc:58:6f:c7:cf:96:84:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=403c3335-e38c-484e-b575-b958511da362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:7a:b5:0e:9b:ce:18:13:28:06:e7:13:6a:
                    2c:53:1a:5d:08:e4:14:05:3b:df:cf:1f:a9:59:e3:
                    78:25:69:b1:8f:a2:9a:27:4a:ab:eb:a3:4d:8c:29:
                    05:c1:fd:9a:76:cc:11:39:4b:08:83:b0:2d:a2:e2:
                    e3:d8:2a:18:e4:1b:35:c5:c5:69:85:66:1a:1f:db:
                    a3:f7:a6:a9:a6:ff:d6:64:81:5a:d8:13:d5:2f:0f:
                    a5:57:b8:fb:29:d1:9f:49:68:e0:d7:1c:c7:e1:53:
                    0c:86:4d:3d:75:0e:dd:d2:0c:4e:4f:f8:f9:b8:70:
                    2b:03:9a:5f:31:0c:1a:cc:48:46:af:4e:aa:a9:f0:
                    bb:21:5a:d1:11:cc:32:84:9d:f1:fb:20:5b:8b:e5:
                    15:41:74:3f:ae:1a:3e:ad:67:2d:d9:47:a9:8c:5d:
                    b8:d8:6a:62:42:2a:1c:4e:9b:10:64:ae:8a:5f:9c:
                    be:f8:07:db:2f:7d:df:af:1d:3a:8c:fa:66:37:d6:
                    53:14:8c:a4:41:b7:cc:42:42:74:80:9e:e5:21:07:
                    27:b2:d1:de:0f:79:c5:bb:00:c2:e6:e2:e6:e1:93:
                    62:0b:ba:79:f2:4e:08:c7:3d:9b:95:34:98:48:13:
                    82:80:f6:17:14:0e:ab:d5:a8:08:f1:88:ab:ab:03:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0A:21:A8:87:80:C8:51:A2:C9:20:6D:66:21:EB:82:D5:71:22:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:55:d5:00:97:7f:ce:1a:d0:8f:1f:84:8d:a5:90:af:9e:
         dd:1e:b4:6d:0c:c3:aa:c3:a5:2e:39:da:5f:0e:36:d7:e7:00:
         42:36:04:31:57:bc:20:79:4d:53:bd:18:6f:06:74:c7:d9:7d:
         b2:4c:f1:1a:4e:02:eb:b4:4e:b8:22:e7:e0:c7:65:01:88:f1:
         fd:82:29:0d:02:84:33:db:7f:e1:0d:1e:11:46:5f:bb:75:63:
         39:44:13:be:32:05:fa:81:6c:ef:db:6c:15:15:b8:22:50:79:
         e9:8d:d2:a5:68:2e:1b:20:38:1c:67:e1:5c:7b:ce:6d:d0:f0:
         6c:61:53:ee:b1:ad:cc:13:0f:26:66:f7:8b:ff:6f:3d:d5:49:
         f4:93:db:1b:34:64:4b:73:b2:b8:23:ec:e0:22:25:7a:bf:7f:
         39:5e:cf:10:ce:bf:18:30:35:c5:69:28:0b:fc:38:e3:29:a6:
         28:3e:a5:23:28:a9:3f:62:bd:0d:07:2c:59:ee:d0:0d:7f:4c:
         c2:6d:7f:ee:af:4e:7a:4b:78:23:86:2a:c7:b8:e5:4b:d1:d0:
         29:5c:16:f7:a0:3a:7f:be:68:86:60:25:a0:61:33:9b:88:ba:
         73:af:e1:fe:df:16:e1:89:b5:63:20:2e:ac:5c:4f:1f:eb:dd:
         12:f0:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:23 2024 by rpki-client on console-ams.rpki-client.org