Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
File:                     237f5699-9f34-3f3e-8592-776da251ad95.roa (raw, json)
Hash identifier:          Hn09PmO1Ekveo68BayKzz5aHsw3Zn3800je9si1EA88=
Subject key identifier:   87:A0:0B:1F:D2:C8:89:4A:66:65:33:56:F3:44:35:AF:6D:A0:B1:03
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F432858457082F601C23342A7D53AC080
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     54163
IP address blocks:        207.91.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:f6:01:c2:33:42:a7:d5:3a:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=3e147a9b-09f9-4f5b-9e35-e10ff61d9e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:e0:6a:93:e5:16:6c:38:09:95:a2:7d:8b:
                    22:47:46:bf:1e:a1:35:e0:b5:67:95:2d:59:ac:20:
                    21:ba:26:d4:02:b7:0b:50:21:e8:90:71:40:90:c1:
                    8f:85:15:e3:7e:83:0e:fa:81:53:bf:4f:65:63:ee:
                    d2:e8:9c:a3:fc:b7:2c:f1:0f:86:8a:77:be:4a:3b:
                    d2:92:10:3e:82:fa:5e:18:d4:c5:1e:5a:8a:5b:9d:
                    62:8c:68:78:a4:9b:08:ae:98:83:3d:59:60:63:0d:
                    66:26:94:84:94:37:47:c3:78:a4:00:31:2f:96:5f:
                    6f:36:6d:94:6f:06:8c:15:17:4f:5c:cb:4d:57:ef:
                    5a:f5:13:0b:9d:40:57:2a:47:87:2a:b6:d1:3a:8b:
                    35:06:db:8f:aa:9f:2b:4a:e2:a7:9e:a2:0b:a6:49:
                    5b:ab:ff:ee:d4:c8:a8:55:b7:d4:b4:10:7b:37:1d:
                    12:80:ec:ca:31:cb:6a:40:2c:62:e0:db:b7:f0:f9:
                    c2:fa:50:9d:b1:21:39:fe:c5:34:40:42:65:17:ee:
                    2a:c8:a8:e2:76:d0:65:fc:98:8a:5f:25:f6:b5:e2:
                    e2:c6:7f:e6:e1:39:2a:cf:bf:59:c5:f0:f4:d3:e4:
                    73:36:92:d8:f4:c1:9d:b8:a1:11:4e:c1:83:94:eb:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:0B:1F:D2:C8:89:4A:66:65:33:56:F3:44:35:AF:6D:A0:B1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.91.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:e4:93:df:a9:f8:d0:b1:57:a0:d6:a7:74:5e:db:48:de:
         aa:fc:17:8b:d5:ce:52:38:5a:91:4c:df:86:19:70:25:ce:70:
         89:13:86:ea:c6:2b:13:34:6b:4c:4b:96:a7:68:2a:a6:2d:a3:
         b7:cd:01:d4:e2:d6:1e:3f:25:d3:5e:2c:fe:0b:70:d6:b8:30:
         6f:15:8d:f6:7a:6a:34:27:11:9f:9d:5e:c9:ff:0a:0b:12:31:
         02:75:e1:e6:54:b2:57:6f:ef:08:b6:7d:e9:37:29:57:d0:7c:
         20:f6:c4:38:18:f5:eb:9e:65:a7:ac:20:16:3b:8b:8b:ba:2a:
         c1:de:87:83:3c:e6:da:e5:01:45:9e:8b:ab:ca:86:5f:54:a8:
         bd:9f:fb:2a:98:e0:c7:70:25:36:26:5b:fb:1a:08:00:12:87:
         07:31:c1:4b:91:a7:ba:6f:3c:a9:1a:9b:9a:10:be:ae:84:d6:
         f4:0a:0a:33:55:5f:bf:cd:2a:f9:3f:21:aa:e7:1a:2b:c1:e5:
         15:18:02:ca:26:c7:9e:75:5d:aa:10:e4:b2:a8:f6:9d:1f:c1:
         c7:18:77:68:20:5c:42:2a:e4:95:ed:1f:f0:26:39:48:46:df:
         ad:4a:63:cc:fb:25:a6:20:0c:93:e6:db:9e:0b:e6:8b:9f:68:
         fa:89:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:35:17 2024 by rpki-client on console-fra.rpki-client.org