Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
File:                     e7afb843-f085-3588-909c-5f913275b459.roa (raw, json)
Hash identifier:          C6AScX6Yr57Xo51XOERrC3ZiQXg948I8IFvdh9hJ0pg=
Subject key identifier:   6F:04:D9:0D:AE:0C:8C:A9:17:DF:FF:F8:19:7E:D9:1A:DD:BF:00:A1
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F43285846BF85113F3682C62F1FA87EF0
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa
Signing time:             Sat 03 Aug 2024 01:00:27 +0000
ROA not before:           Sat 03 Aug 2024 01:00:27 +0000
ROA not after:            Fri 01 Nov 2024 01:00:27 +0000
asID:                     53454
IP address blocks:        192.223.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bf:85:11:3f:36:82:c6:2f:1f:a8:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Aug  3 01:00:27 2024 GMT
            Not After : Nov  1 01:00:27 2024 GMT
        Subject: CN=b18ff6e4-aa4f-446d-9252-0e1a1f1d2001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:14:50:4f:1e:71:ef:5e:bd:45:f8:6b:c3:
                    ba:75:cb:37:2a:fa:2e:f5:ae:6c:7f:70:c0:85:2b:
                    ac:5f:0a:e4:00:4b:5a:08:dc:71:23:05:d7:41:ab:
                    69:a5:de:f6:98:07:27:50:8e:75:66:b5:05:51:e9:
                    ec:81:21:36:c5:d6:5f:21:da:85:b3:c0:33:7f:f9:
                    05:60:b8:94:4d:1d:ec:d9:71:30:46:08:ee:23:5b:
                    06:8e:a9:a1:55:dc:a6:f6:20:95:65:13:a2:43:14:
                    97:38:a7:ea:0e:7e:13:73:b5:0c:58:22:d2:7d:ad:
                    3e:53:da:8b:f6:94:da:c6:df:1c:6d:36:95:ba:53:
                    7d:40:32:7d:2f:73:9e:27:b4:c0:21:45:e3:ee:a9:
                    3f:3e:dc:ec:4d:b9:f0:9f:ca:99:7b:92:90:4e:43:
                    cb:44:e9:b4:28:5f:6e:d8:7d:23:c6:cd:de:ad:ae:
                    0d:c5:d6:77:77:39:46:e1:88:c5:96:b6:dc:77:58:
                    f7:c5:07:d3:1b:08:07:9a:f0:b2:f5:f9:1c:c0:63:
                    22:16:76:7d:0f:4c:ca:13:af:0b:39:0f:cd:24:b9:
                    3a:b6:f9:30:91:c2:99:b6:7a:26:0e:4c:d8:15:28:
                    cb:f2:b6:da:19:dd:60:a2:41:9c:aa:aa:7c:83:de:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:D9:0D:AE:0C:8C:A9:17:DF:FF:F8:19:7E:D9:1A:DD:BF:00:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:29:a6:5c:49:37:27:fb:c4:e6:66:80:9f:d7:0b:57:5d:
         e7:32:61:29:7c:07:e2:99:b5:4a:b3:dc:7e:6c:1d:7f:88:21:
         5e:26:a9:10:58:7d:81:23:9f:aa:04:27:80:fc:46:d0:51:63:
         ed:98:bd:54:d8:9b:95:dc:70:69:b5:49:38:65:1a:c3:c3:b9:
         cc:22:7a:dc:a0:4e:a6:38:cc:75:e9:33:7d:67:0f:87:d1:52:
         50:e3:65:b5:58:83:9f:df:30:00:ff:83:30:8d:48:02:2e:9c:
         48:ba:b4:ab:d6:5d:77:ca:e5:86:51:2d:1a:15:08:92:33:4b:
         4e:83:10:f6:c6:97:d7:d4:83:41:f5:1d:48:10:0b:7c:fd:3f:
         29:a1:0c:8e:f9:12:ac:2e:66:ef:36:1f:dc:b3:7a:8d:ac:a1:
         39:28:6b:48:96:ca:a5:57:99:4a:aa:ec:3a:b9:21:04:72:05:
         ef:9c:9b:07:1d:45:f2:dd:53:36:82:1b:26:b4:9b:cf:43:e8:
         47:17:7c:1e:b2:41:76:83:f1:91:67:48:eb:c1:d4:34:71:02:
         b1:96:79:c4:dd:2a:6a:51:e7:4c:2d:b6:07:60:ca:03:dd:e9:
         b7:39:b2:b0:84:40:2a:07:e8:69:2f:50:c5:8d:53:18:90:9c:
         52:6b:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 17:03:27 2024 by rpki-client on console-fra.rpki-client.org