Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa
File:                     cf2344fd-ae0f-376c-bb1c-dc7230820578.roa (raw, json)
Hash identifier:          AE2YOxt9I2vIZMEWOpkjudPM3awBad6NrOQL8WFFnYI=
Subject key identifier:   6A:DF:97:D7:EC:B2:F9:DF:AF:3C:0F:28:80:A8:08:A6:A4:C8:BD:ED
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858468F61B739B8E30C0F1E5AE000
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa
Signing time:             Tue 16 Jul 2024 19:10:29 +0000
ROA not before:           Tue 16 Jul 2024 19:10:29 +0000
ROA not after:            Mon 14 Oct 2024 19:10:29 +0000
asID:                     400400
IP address blocks:        205.234.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8f:61:b7:39:b8:e3:0c:0f:1e:5a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Jul 16 19:10:29 2024 GMT
            Not After : Oct 14 19:10:29 2024 GMT
        Subject: CN=64a84ad3-4ad9-4d65-bcd6-cdf9f5a0feee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:fb:9e:01:f5:91:f4:b6:06:c9:7f:2a:30:
                    95:1a:0c:27:55:af:82:e6:ae:ce:78:e4:cc:7b:28:
                    73:ac:cb:73:5f:cf:6f:58:3f:fe:48:ac:3f:a2:25:
                    d4:26:f0:b3:23:43:dd:4f:10:48:cb:b6:c6:cd:1f:
                    16:49:b4:11:f6:4d:8a:36:12:a9:89:95:cf:e9:21:
                    ac:d3:0b:0d:d4:5a:31:98:2e:d9:8a:70:a7:97:fa:
                    e9:d9:aa:b8:c8:2a:cc:32:f0:fc:f0:cb:f0:09:d5:
                    bb:9c:b8:da:66:91:65:4f:5f:f7:d5:bf:78:0a:ab:
                    66:ca:70:76:b4:c4:76:26:2b:4b:a0:1f:41:ff:c7:
                    65:7c:5d:6a:34:c5:32:a2:a9:52:27:14:d0:53:81:
                    76:b2:c9:c2:96:f9:44:36:50:a5:d5:64:25:ef:28:
                    d1:cb:be:48:48:ce:f8:85:28:4e:e8:ea:c5:1c:b2:
                    0a:d6:c1:42:44:fe:d6:2f:a1:04:52:db:ae:ca:90:
                    43:8b:c9:39:d8:ca:9b:8d:9c:1d:d4:12:11:b6:50:
                    60:4d:aa:8f:67:c3:cd:10:b6:34:e0:3e:eb:c2:bd:
                    81:46:92:32:e0:71:42:c2:aa:df:8b:3d:43:5c:05:
                    e1:55:1e:dd:d6:9b:94:c2:6f:eb:83:0e:70:cc:fb:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:97:D7:EC:B2:F9:DF:AF:3C:0F:28:80:A8:08:A6:A4:C8:BD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a3:bf:b0:5a:3e:cd:d0:e6:1c:84:16:f3:74:de:85:4f:c6:
         a6:2e:9e:3c:eb:88:81:51:2f:2f:4a:f5:0d:f8:95:20:6f:c9:
         38:11:54:2b:02:12:7b:b5:58:73:65:d2:9d:22:37:e3:d6:b7:
         ab:a5:fe:d8:2d:3f:1d:93:24:58:75:8b:f4:74:c9:8c:0e:e1:
         f1:da:12:03:dd:cf:d6:ed:e0:66:a9:66:12:24:af:71:35:a8:
         5b:d7:e4:37:43:9d:87:a1:8a:12:fd:90:0d:2e:24:10:19:fe:
         0e:50:93:e4:7a:73:83:0b:b2:02:63:be:07:85:58:99:6a:7f:
         71:d5:70:41:30:b7:77:26:99:0b:de:e6:06:c4:de:ed:41:36:
         2e:c9:28:91:6a:c8:91:dc:f7:ab:e1:2e:f0:cf:43:1c:cc:13:
         df:b8:cb:01:fd:8b:f4:49:18:ea:af:f7:a4:bd:f5:74:ba:18:
         0d:c4:90:f6:22:e8:95:15:07:03:fd:69:cf:53:16:59:31:8e:
         30:5b:0b:92:98:d2:1e:dc:ec:e6:74:b8:17:dc:35:e9:c3:a6:
         65:8f:e7:7e:9c:fb:0b:3e:1d:15:d9:9b:cc:ae:d4:20:f1:95:
         4c:85:b7:68:26:2d:30:b5:a0:b5:3f:aa:bb:97:b9:9b:50:d1:
         7e:1f:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:03:51 2024 by rpki-client on console-ams.rpki-client.org