Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa
File:                     3c3f1331-082e-3016-8d90-383739e6a21b.roa (raw, json)
Hash identifier:          bSic3Zuvu6hP2/eZsbSk8wgEdQGSwvRjzKklxrBiNKQ=
Subject key identifier:   47:31:A8:95:75:38:7B:E6:60:C1:AF:EE:F3:76:35:A7:FE:F8:17:0D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285845807C85FFB88FA8E98616D3C0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa
Signing time:             Wed 10 Apr 2024 18:20:27 +0000
ROA not before:           Wed 10 Apr 2024 18:20:27 +0000
ROA not after:            Tue 09 Jul 2024 18:20:27 +0000
asID:                     16509
IP address blocks:        207.202.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:7c:85:ff:b8:8f:a8:e9:86:16:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 10 18:20:27 2024 GMT
            Not After : Jul  9 18:20:27 2024 GMT
        Subject: CN=747de843-bde4-436c-b98b-f6f8d07162bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:ee:e5:37:d2:60:1c:a5:47:8d:c8:7d:2b:
                    a7:8f:80:8d:2f:ef:d9:58:a5:fa:74:a2:71:5c:03:
                    77:f6:40:2a:10:7c:92:70:20:6a:ba:0a:7d:29:0a:
                    63:5e:e4:e2:59:ff:ee:0a:43:02:c0:8d:3f:eb:c9:
                    53:f0:bf:90:1e:ca:05:68:d6:32:10:a4:35:30:a3:
                    6e:4e:b3:f4:7f:fc:8b:36:e6:d4:5f:e1:96:34:34:
                    ea:d4:7b:d2:7b:84:cf:98:58:9e:76:f7:68:c9:e1:
                    48:8d:7f:7e:c4:ba:9f:0f:16:64:7e:29:d6:48:53:
                    da:82:bf:81:13:69:59:0e:3f:12:9e:af:79:b4:f8:
                    19:bd:14:d9:25:e4:71:1c:93:6e:24:f6:06:37:7e:
                    5c:c9:9a:35:3b:17:aa:b7:25:61:3d:0e:f4:d7:60:
                    60:b2:4c:25:82:50:57:85:e0:96:61:c3:93:5f:9e:
                    89:34:2a:5e:6b:1e:7a:21:ea:61:21:f5:73:d3:2f:
                    71:fb:a5:bf:4f:f3:99:83:bc:74:89:a8:37:ab:bc:
                    5d:a3:c0:c0:17:5b:14:cd:0f:e9:a3:bf:db:8a:e7:
                    7c:46:14:97:c8:d7:2e:ec:f8:bb:99:17:b3:23:33:
                    00:3c:b0:65:61:72:f8:8d:99:f7:7e:05:8e:79:2b:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:31:A8:95:75:38:7B:E6:60:C1:AF:EE:F3:76:35:A7:FE:F8:17:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:17:a3:44:27:92:40:08:33:9a:e7:21:a9:77:53:a5:77:6b:
         33:9f:67:18:a5:62:f1:16:b5:11:29:5a:70:78:6a:87:9d:48:
         65:51:fe:23:6a:86:e4:12:a6:16:98:53:fb:c4:c3:50:bf:16:
         85:f5:bf:42:ab:56:69:4f:0c:04:91:34:6b:a4:f0:60:5f:51:
         c6:93:26:fc:17:6f:db:d6:8d:e7:a6:e2:82:52:5f:9c:9e:ef:
         d7:24:2d:81:c0:40:69:88:02:46:b1:f8:23:5c:65:6e:a4:e6:
         d7:34:78:0d:5f:87:39:27:ee:3c:7b:72:55:fc:38:4e:e6:d6:
         36:1d:5d:ea:6d:6a:81:d3:7e:0e:3b:4a:00:61:24:88:48:5e:
         57:36:c4:c6:2f:21:40:0e:9f:ce:2a:5d:d4:22:b5:48:e6:37:
         71:5a:0b:10:9b:e0:a7:69:2f:1b:8b:b0:48:5f:4b:bc:c8:5d:
         f3:a9:7e:74:b5:f7:6f:fe:10:80:08:95:04:ea:33:f1:0b:5b:
         f3:26:e2:7b:01:da:48:b7:87:09:ff:86:e2:d4:c7:34:e7:bb:
         c7:46:e4:85:3a:ff:22:80:31:9b:e8:f3:c3:2f:68:d0:21:4d:
         67:a1:1a:62:6c:5e:e4:75:ed:b9:94:dd:3f:0b:c9:3c:f1:ca:
         fb:e3:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:54:47 2024 by rpki-client on console-fra.rpki-client.org