Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/fabea89c-897c-3602-9afd-a343e37a9ea6.roa
File:                     fabea89c-897c-3602-9afd-a343e37a9ea6.roa (raw, json)
Hash identifier:          KovuXoB3JUWp9R4Irr8EgoqmtB3+9NzxN6HDK8WdXnw=
Subject key identifier:   8B:DB:41:E3:53:66:AE:20:25:21:69:A7:E9:FF:6F:30:F9:D9:5F:92
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285845B383746EE93B45E38A477040
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/fabea89c-897c-3602-9afd-a343e37a9ea6.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     6079
IP address blocks:        207.172.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:74:6e:e9:3b:45:e3:8a:47:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=c087bf98-f4ed-4148-88ff-bc4eabe138d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:65:7c:c7:1a:51:0c:a5:1e:69:f4:4b:64:
                    a4:ba:e8:a1:0e:5f:97:9f:bd:3c:d4:06:ba:f0:19:
                    66:a7:24:2f:69:cb:c6:ea:51:a8:5d:ca:73:f9:c8:
                    7c:f3:8f:94:1a:38:8a:af:99:a6:e8:39:b6:5a:d1:
                    16:b2:5f:eb:23:1f:1e:77:46:22:3a:bf:8d:02:be:
                    18:61:54:98:0d:66:17:27:fe:2b:3a:37:45:19:19:
                    46:0e:98:75:5d:c5:13:0f:84:96:aa:57:13:e1:ca:
                    ed:8f:f9:c4:58:43:8a:52:3b:1e:76:06:9e:9b:0d:
                    39:0d:85:dc:e7:ec:45:dd:a7:15:5c:c3:c7:ae:4c:
                    a7:a9:49:89:3b:b4:6d:38:f1:3f:a6:15:4f:16:c1:
                    7f:58:2d:13:55:f7:91:11:81:d9:56:bc:dc:b6:06:
                    c5:e5:a0:54:a6:87:75:01:59:92:d2:d5:7d:37:8a:
                    41:49:e9:b6:56:4d:04:c4:68:56:90:b3:47:0c:ac:
                    3c:d0:6f:02:9a:e7:a8:15:95:4a:1b:95:4d:46:3b:
                    2e:9b:83:5e:6d:65:26:2a:7d:9a:be:10:2d:eb:e8:
                    9f:b4:07:94:6d:44:02:87:c0:d0:94:73:11:6d:d5:
                    d5:ff:85:ad:db:2b:bf:fe:1a:18:47:5f:62:dd:b9:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:41:E3:53:66:AE:20:25:21:69:A7:E9:FF:6F:30:F9:D9:5F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/fabea89c-897c-3602-9afd-a343e37a9ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:76:87:c3:da:d8:21:c6:f2:b0:94:cc:03:20:f4:36:1b:1a:
         f5:5c:02:c0:6f:eb:f1:61:1e:47:fc:28:0f:32:5d:af:23:3f:
         92:59:e0:80:74:89:ce:39:cb:d9:ce:be:43:76:4d:e4:23:19:
         c8:20:32:23:ed:f1:24:5c:ee:92:49:58:c8:f0:56:63:7d:45:
         01:ef:4f:be:25:3c:8e:f4:29:d8:d5:20:a7:57:1c:68:99:84:
         d0:52:ee:1d:19:27:1f:fc:37:c6:e4:5f:41:18:9c:30:de:2d:
         73:27:a5:d5:58:58:23:84:84:17:cc:2d:95:aa:73:b5:f7:12:
         f9:48:84:33:70:e5:28:b0:8f:18:da:e4:42:cd:4e:73:5b:29:
         22:6f:5f:a0:ef:26:9b:d4:cc:6f:08:19:63:c3:f1:61:f2:5f:
         80:39:40:23:cb:3f:57:f7:dd:a9:11:97:02:45:bc:7e:c9:3e:
         ba:68:64:c2:34:23:3b:32:ab:f2:01:13:9e:57:f8:e9:b8:31:
         2b:d7:58:b1:f7:25:fe:0e:4d:42:e3:d4:ee:55:54:bd:04:92:
         7c:97:d1:7f:7e:f3:5d:62:f0:e8:b2:0e:e0:5e:16:a4:85:e2:
         19:c2:d6:9d:3d:72:2c:17:78:20:19:57:c7:3e:fe:cb:ac:37:
         69:b7:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:09:33 2024 by rpki-client on console-fra.rpki-client.org