Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
File:                     0917c39d-467b-37b1-b692-3a38d4b29e0d.roa (raw, json)
Hash identifier:          7WJ1jFBpooSowgFkocd0ll6TnAmcr+7LlpnelxLAZKU=
Subject key identifier:   54:C3:15:75:E2:48:DD:1E:B4:89:31:3C:F3:E5:57:9A:8E:1C:94:3A
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285844EECFFA41AA6A5667E6E7B680
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        207.202.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fa:41:aa:6a:56:67:e6:e7:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=7d956f52-7a88-4ab9-9591-3540e68f5bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:b1:0d:35:3d:8e:18:f7:20:ca:69:a6:95:
                    07:4f:3d:a7:4f:3c:6f:fa:64:cf:db:54:9a:31:15:
                    48:3c:ab:77:52:9d:b0:e7:70:ac:86:66:6e:a8:d1:
                    c7:ea:58:95:d4:11:6b:eb:45:a8:82:85:d6:2b:92:
                    49:09:93:0f:3a:20:c3:2d:fd:27:31:79:89:04:57:
                    1c:b6:77:b8:02:ec:16:c3:a7:b2:6e:9a:78:3a:55:
                    95:71:a8:c2:3d:c9:6a:2d:5e:c1:72:a5:5a:e1:84:
                    5c:7e:c7:d4:69:9d:ae:d9:e2:13:60:fa:3e:b4:03:
                    7f:7e:a5:76:f6:9b:45:b0:f6:da:f3:22:ad:77:d8:
                    65:aa:47:46:a3:e9:a7:a7:a0:2b:36:3a:43:5a:a5:
                    fd:72:58:bf:d6:f8:b3:b3:b6:ad:8d:02:5d:ed:df:
                    ce:15:95:59:60:80:8a:e5:28:fc:e4:35:9b:7e:a9:
                    5e:86:20:b8:cf:cc:15:b5:1c:30:33:99:4a:40:bc:
                    fb:5f:d1:f9:d6:e0:e3:f1:f4:f4:af:4c:03:0f:1c:
                    39:9a:ec:3a:fd:00:5a:87:e1:db:15:c9:3e:64:d3:
                    15:da:e2:28:39:7d:1b:c4:bf:1d:e9:8a:8e:aa:93:
                    06:31:e8:55:0b:b8:e3:dd:a7:f5:8e:0b:fc:4b:c0:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:15:75:E2:48:DD:1E:B4:89:31:3C:F3:E5:57:9A:8E:1C:94:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:3e:4e:af:e5:20:f4:eb:e3:5d:f0:58:b3:94:82:07:da:
         8c:4f:d1:96:29:36:56:e5:a4:6c:16:b8:1e:aa:84:88:71:a2:
         72:16:c6:f5:4d:fe:20:fe:03:d7:67:09:65:ab:92:49:99:51:
         e4:bf:1a:ca:6a:76:a6:d6:43:6d:5d:1d:68:b3:34:b2:95:10:
         32:96:d7:a1:f6:1d:2c:4b:4d:c6:44:fa:b5:6d:d9:db:bb:48:
         73:ac:b6:a4:e6:8a:50:96:a2:23:9e:f7:be:5e:44:3c:91:c4:
         82:de:28:4d:d6:4a:ed:2e:ff:f6:32:89:1a:8a:94:6d:9c:08:
         b6:aa:7c:9b:b1:e8:1b:dd:75:3c:7b:9f:89:20:4a:f9:ec:37:
         97:63:bb:4b:42:d2:7a:a4:00:5d:28:35:ad:09:e1:a7:6d:d6:
         0e:33:72:92:b2:b5:1b:1b:7f:d9:81:85:ef:16:69:27:c4:e2:
         40:81:5e:97:b7:4a:2c:a2:4c:24:53:38:4d:ee:c5:26:72:45:
         79:2c:c3:85:12:64:85:9a:3e:3c:c5:a0:e5:c6:74:a6:71:f4:
         0b:9c:38:31:27:3c:75:31:c3:ef:e1:c9:74:ab:88:06:57:33:
         e0:1c:cf:5e:70:4d:c4:06:55:b5:a0:4f:cd:89:1c:bf:ac:7a:
         f9:4c:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:55 2024 by rpki-client on console-ams.rpki-client.org