Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8d25bffb-745d-3115-921e-c589c108ee67.roa
File:                     8d25bffb-745d-3115-921e-c589c108ee67.roa (raw, json)
Hash identifier:          AHGlGtUzMyPNE+69MhRuGhdO0ycZ2LahuJ995iyykw4=
Subject key identifier:   FE:E0:D2:39:D0:BE:5F:A7:76:B2:BF:6F:2E:F6:72:C0:A8:C6:80:E1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845C87394BBF5EB9918B7A75600
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8d25bffb-745d-3115-921e-c589c108ee67.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     12491
IP address blocks:        207.176.12.0/24 maxlen: 24
                          207.176.11.0/24 maxlen: 24
                          207.176.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:94:bb:f5:eb:99:18:b7:a7:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=67bbda3a-68fa-4165-a6c5-aad3a56434f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:95:9b:b4:d5:c8:c6:8f:8d:92:46:4f:36:
                    29:5a:38:de:99:18:96:ae:98:56:f6:53:2b:dd:d5:
                    90:22:69:31:c9:f9:81:56:54:a1:16:e9:e9:9a:8f:
                    21:d3:c9:7d:2a:c2:66:84:9f:b5:eb:31:1b:45:97:
                    7b:77:bb:2b:96:fb:83:7d:e0:bb:a1:ba:c8:d0:0c:
                    35:a4:5c:c8:c5:54:8d:1d:9e:a0:83:e3:34:94:73:
                    39:de:66:e3:5b:7a:ed:58:68:fa:22:99:ab:04:50:
                    c5:28:b1:c5:a9:74:b9:72:d6:88:17:c9:e2:86:a7:
                    22:dd:bf:c9:56:9d:3f:01:cd:42:d7:97:de:13:71:
                    a5:43:6b:09:70:7a:8b:58:a2:46:c1:a0:f1:5c:32:
                    9e:10:e1:92:2c:cd:ac:5c:c6:e1:1d:54:44:e1:61:
                    ed:11:b0:5e:a9:be:78:26:d1:a7:99:01:01:c3:70:
                    0b:ae:8c:42:34:df:4d:8a:7e:2b:c4:cd:53:c3:54:
                    a6:d2:e9:3e:6a:88:24:85:ca:ea:3d:80:b1:1e:fa:
                    cc:1e:20:6d:9c:18:f6:84:b9:c6:17:ff:62:b5:7d:
                    c7:c1:28:73:9e:44:0d:2d:f8:6d:d7:e0:75:b6:30:
                    96:8f:29:3d:13:e1:97:2d:a3:e0:9e:29:a3:37:8d:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:D2:39:D0:BE:5F:A7:76:B2:BF:6F:2E:F6:72:C0:A8:C6:80:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8d25bffb-745d-3115-921e-c589c108ee67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.11.0-207.176.12.255
                  207.176.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:04:34:2f:2a:ab:0b:dd:dc:7b:c4:04:e1:bf:64:15:ef:39:
         da:49:06:19:93:7e:c9:e2:a5:f2:54:cc:99:b7:20:82:02:ed:
         10:1b:45:60:8d:af:3d:2d:d7:01:f0:ee:e9:df:e7:f7:3c:87:
         33:aa:52:53:08:ab:6e:92:58:ca:24:d6:d0:ec:0d:82:c8:57:
         95:70:5f:ab:b5:3f:c9:f8:10:7d:a1:74:f6:96:86:fa:d2:8b:
         05:cd:1b:c1:f2:bd:4b:a1:4f:08:80:60:f6:d0:7d:4f:ea:a6:
         5f:09:b3:71:e8:4f:54:9d:2f:af:12:f0:90:30:75:76:72:21:
         79:37:64:f5:ee:e7:9c:43:b0:88:6d:54:52:47:44:e7:2a:c3:
         e9:9c:ba:45:b5:22:1a:5a:f1:e9:94:09:2b:6a:df:03:6e:8c:
         8b:91:49:bc:66:ff:93:c7:3f:31:4c:e8:aa:25:f1:5a:95:33:
         9f:76:3c:8a:8d:46:91:cc:99:3c:2f:4d:e7:51:34:fd:ac:82:
         d0:56:a6:60:0f:5c:80:23:e0:10:07:40:40:53:9e:93:5b:60:
         17:a9:13:f4:aa:d1:23:7a:35:41:82:b1:a3:c6:06:c7:92:01:
         b0:2c:60:e4:0c:b2:f4:7a:6e:b4:b7:4a:a7:a3:5f:8e:15:92:
         13:11:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:58:28 2024 by rpki-client on console-ams.rpki-client.org