Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
File:                     d7985198-db94-3ad7-b94f-9a83cba2b147.roa (raw, json)
Hash identifier:          ZDR94eIAwZF87RkeJhMMfdsBH3jp3TV5TvhsVUrcknk=
Subject key identifier:   55:FA:59:FE:3D:62:D7:49:26:D1:9E:C5:CE:52:30:FC:AB:AF:45:75
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285845A15E1210D09004142D5DD580
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     398465
IP address blocks:        207.237.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:12:10:d0:90:04:14:2d:5d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=77f22155-4407-4b68-8f8f-4ac38bca330e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:aa:5a:5b:da:e3:03:a4:35:8d:50:80:8d:
                    58:8d:65:f6:78:08:52:0c:60:95:eb:c8:6f:3d:58:
                    0c:2c:2e:51:75:be:e3:bf:31:35:d4:e0:19:3a:84:
                    ec:64:64:8c:d4:1b:d2:5f:4a:75:30:e5:10:c2:c8:
                    7f:07:a1:11:8d:ff:b1:f9:ee:c0:60:a7:2c:7c:4d:
                    a3:c2:f9:95:49:3e:ef:fc:71:9e:23:a7:d9:c2:f2:
                    31:04:38:9c:a4:56:81:f8:59:0f:21:61:4d:c6:0e:
                    28:24:34:68:6a:5e:4e:5a:d4:c1:da:57:f8:f5:84:
                    f3:31:ba:69:12:5f:f3:0c:ba:89:92:dd:0f:e1:12:
                    94:4e:57:ee:45:b1:ff:d3:48:ab:5d:b3:ab:8d:e7:
                    66:84:88:7c:ee:28:05:76:7b:c8:14:b4:26:35:1e:
                    56:2b:a5:07:0e:9a:e6:6b:85:d3:f5:ca:b1:0d:4c:
                    f1:b6:a0:5b:43:b6:3c:7a:40:c3:53:70:22:01:1c:
                    03:70:67:99:b6:81:3f:4b:c8:77:50:05:68:4d:b4:
                    97:ac:e4:f5:81:94:c0:b4:40:c0:cf:c0:f4:76:13:
                    32:28:31:f5:0f:ec:90:a0:f2:62:d8:41:9f:bb:de:
                    62:89:93:e8:24:c3:84:49:74:2d:3f:55:5e:6a:bb:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FA:59:FE:3D:62:D7:49:26:D1:9E:C5:CE:52:30:FC:AB:AF:45:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.237.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:df:c0:b6:1f:16:f7:06:c7:3c:3a:df:d9:2f:68:4e:06:20:
         65:5a:f5:25:c2:cb:e0:81:71:38:c9:7c:83:2a:fd:19:2f:c2:
         c9:63:4e:77:2f:47:a3:59:2e:1a:03:3f:ea:bb:94:a0:5c:53:
         71:d8:87:40:f5:d0:30:1d:8c:6e:7a:3c:a8:4c:6e:25:9d:cc:
         ce:d8:ac:80:34:85:61:6e:55:0f:30:ee:96:0d:6d:07:5e:f0:
         e1:91:4f:4d:07:2f:44:98:b2:93:18:c7:8e:56:41:fe:4c:85:
         87:66:db:c8:cb:64:fb:3b:61:63:00:7e:bd:6b:e9:8c:ec:41:
         36:4c:29:6b:f4:4b:e5:5f:02:7d:38:49:62:72:3c:37:3c:fc:
         81:53:f6:5a:26:d0:52:ba:2c:35:0c:4f:52:1b:8c:8f:0b:3c:
         a6:33:72:93:81:c5:98:99:35:4e:4f:d3:d3:47:98:1d:90:24:
         68:91:84:25:88:92:e2:03:b9:ad:1d:bf:fd:ef:e7:11:18:96:
         7e:b8:2f:92:a8:dd:e9:34:e0:6b:a9:46:35:3c:14:14:30:94:
         1f:e1:ed:13:e6:1e:f1:0f:f1:e1:01:6e:fb:92:c6:ab:10:10:
         71:ae:4e:c7:77:68:a7:ba:06:38:5c:ec:1c:c6:d9:35:f0:c1:
         7d:2b:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:38:36 2024 by rpki-client on console-ams.rpki-client.org