Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
File:                     dcf9e65a-be83-3af7-9131-27213172cafc.roa (raw, json)
Hash identifier:          zzpZMeGRK8gfGCKMsLGvjvjPL8mldKCDb4fdPdPPacE=
Subject key identifier:   0A:C1:59:79:11:5B:CD:12:C9:98:A1:70:68:D7:01:BA:CB:ED:CC:93
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F432858474850A13ED46398213BAA7800
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     400587
IP address blocks:        121.127.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a1:3e:d4:63:98:21:3b:aa:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=16901179-0f60-4d0a-9aa1-81d3a80ebd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:7a:df:9a:06:b0:63:97:d7:39:95:4c:85:
                    26:d2:7e:e4:a1:fb:49:cd:b4:04:ed:0d:8e:86:bd:
                    c2:3e:67:69:37:fb:f8:cb:6f:d3:98:1a:d8:56:d3:
                    de:1b:e4:96:09:34:94:d7:f6:c4:6c:28:38:1e:68:
                    6e:1d:06:3f:df:10:58:7f:88:b7:61:00:57:05:94:
                    6f:91:bb:34:a5:04:92:76:2b:9a:6b:54:18:cd:23:
                    ed:58:24:c2:86:0a:00:c2:f8:88:2d:66:da:c0:17:
                    60:a0:45:1b:72:ce:db:9e:41:02:33:e0:09:0c:10:
                    a3:e5:6f:db:1b:ae:f8:ff:96:f1:d8:0a:c0:ee:96:
                    53:2c:38:5a:3f:90:0b:ee:12:43:6c:c4:d7:78:78:
                    06:23:15:29:38:e4:e1:94:80:c2:fa:42:ab:34:54:
                    47:fb:ca:c2:92:5c:8c:fa:0e:57:83:7a:92:05:80:
                    12:b1:26:e8:0d:77:5e:9f:8d:74:67:5a:66:18:b6:
                    ca:22:48:6e:52:53:26:d0:52:4c:73:0e:e8:39:48:
                    cb:c4:cd:3c:bf:89:88:f1:b3:15:3d:72:ce:87:19:
                    d2:e0:75:a7:40:d0:aa:f0:27:2d:f0:5f:ca:a6:28:
                    48:03:ee:a5:fc:bb:e4:9b:5e:8b:d7:b9:fc:44:d7:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:59:79:11:5B:CD:12:C9:98:A1:70:68:D7:01:BA:CB:ED:CC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/dcf9e65a-be83-3af7-9131-27213172cafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.127.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:58:21:5f:68:76:b7:85:15:85:2c:78:3a:a5:da:42:1d:
         90:cc:59:63:ca:e4:ff:d6:13:2a:83:16:61:63:8c:50:de:22:
         6d:97:66:22:61:7b:97:d8:1b:9f:77:b4:db:12:6c:99:5e:b2:
         62:fc:b8:1f:29:9c:79:01:f3:17:e9:e1:ad:4e:af:76:65:ce:
         a0:97:51:65:b8:43:7d:b5:d3:92:08:9a:1e:6a:ce:72:a9:ea:
         43:47:85:24:28:75:22:29:b6:30:e7:bf:11:f6:b1:63:06:6f:
         a3:8b:1c:79:e7:41:48:51:5a:26:41:7e:80:b8:09:44:d5:e0:
         fb:01:d7:cc:f9:e0:46:a6:5f:49:42:70:e1:a5:67:7c:e1:f3:
         6b:7a:a4:aa:c5:ae:e2:6f:28:7b:49:ab:67:e6:ae:47:3c:63:
         d8:31:06:a9:d5:ce:e7:57:14:bd:18:55:73:8f:4f:a2:a3:3e:
         f0:b6:43:6f:d1:2a:51:99:65:1e:1b:90:65:27:86:e8:03:82:
         db:1f:19:be:e1:b2:c8:c2:a8:a2:e1:7e:f7:c7:db:1a:50:6c:
         d0:ed:b5:65:13:6e:36:b9:3f:23:03:47:33:b4:88:1f:d1:7d:
         93:8d:d9:d1:1d:3e:62:31:aa:fd:ef:29:a8:e1:0b:13:11:37:
         54:4a:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:04 2024 by rpki-client on console-fra.rpki-client.org