Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa
File:                     c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa (raw, json)
Hash identifier:          Jx3cZWONcDV2XvFTtA489Lb2O0XGjXLVvEAZYJd5kn8=
Subject key identifier:   DB:23:67:D2:45:DD:4E:22:B8:56:61:FA:0E:F3:FE:14:71:89:5C:27
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F432858476B3644016FADC39C761B4680
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     62651
IP address blocks:        205.185.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:44:01:6f:ad:c3:9c:76:1b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=a667346e-1fc4-4cba-9d30-acf3efdc1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:aa:f1:e3:b4:94:86:78:de:7b:3e:4a:34:
                    82:b0:ec:34:c3:c3:3a:da:b0:5d:cc:e6:53:ab:00:
                    1a:93:29:bd:25:c4:43:31:50:f8:35:27:57:d1:e2:
                    33:f9:7d:fc:bb:1f:28:5f:45:1d:f0:3c:d7:0e:5e:
                    05:c9:42:a1:e5:a2:9f:6d:3f:ae:60:2a:28:66:d8:
                    2c:4f:76:cd:e0:78:66:4d:16:70:43:de:dd:a6:e6:
                    a4:8e:e5:ca:55:24:e5:84:0a:09:18:75:92:c7:c2:
                    1f:c0:8e:5a:37:66:6d:bc:8a:50:66:48:e4:d9:63:
                    69:ac:be:0b:9f:cd:7a:3a:5c:57:a7:0a:f8:85:63:
                    c4:00:eb:95:2a:3b:3e:51:43:3d:60:0d:28:0f:ae:
                    10:c5:e6:67:d3:80:30:2b:6c:cd:57:d9:fc:76:93:
                    dc:b2:d5:d8:c7:e0:63:95:95:1c:9c:50:0e:d4:51:
                    63:b9:ba:60:cd:4f:7b:f3:7c:7e:c3:9b:4d:0c:a6:
                    32:a9:09:52:56:30:19:a4:8f:b1:07:62:9f:41:4a:
                    8b:88:77:8d:6d:9b:74:95:3c:98:3e:a6:84:63:3b:
                    8e:f9:f3:d4:fa:77:3b:d1:93:23:c0:00:1a:b6:db:
                    61:ff:ae:83:2e:f6:f2:e4:b7:d9:32:1e:b9:c0:b1:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:67:D2:45:DD:4E:22:B8:56:61:FA:0E:F3:FE:14:71:89:5C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:53:c1:6d:0c:0f:34:1c:e6:9c:ec:cd:d8:a5:40:47:c7:ec:
         3a:a3:20:35:74:7a:62:96:f4:16:65:07:b9:1e:b6:bd:ce:8c:
         a9:25:a4:6f:4a:63:cc:a6:dc:85:15:e6:40:82:0a:c7:f0:f7:
         5d:da:ed:a6:11:60:91:5e:ae:e6:28:c0:e5:da:44:32:65:42:
         3b:ac:6f:f4:ea:49:c4:53:63:3f:f5:5e:1a:f1:de:42:57:88:
         b3:44:fd:c0:26:7e:5d:fb:0c:10:88:cc:e8:7b:04:c1:65:50:
         5e:45:e1:d2:da:f9:ba:d5:77:56:a2:e9:fe:3f:a3:0d:08:4f:
         e0:08:3e:d7:43:b8:64:3f:16:d6:3b:f9:c6:c0:c4:14:74:3f:
         f7:03:69:a1:e9:5d:28:27:b1:cb:a2:7e:50:18:40:f8:cb:2d:
         fb:d0:fe:34:81:1d:e3:bb:80:f3:a5:ec:f8:cc:82:7d:fd:9b:
         b4:1c:e6:fe:ef:4c:3d:46:67:a0:24:2a:48:7c:17:0e:ca:0a:
         18:4a:a7:9f:e8:e2:d0:12:5a:6e:ab:71:88:c4:03:5b:e1:b8:
         5b:44:d2:a7:e0:60:eb:6f:a1:01:38:b9:16:91:85:c7:50:ff:
         d8:80:98:37:d8:17:86:9a:8d:4f:f4:6c:f2:8c:77:68:54:98:
         df:ef:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org