Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa
File:                     79b37f01-5e21-3a59-82ee-5a030c1c5583.roa (raw, json)
Hash identifier:          Q4c66Ac6WIzK5gQbCxkc+YiYWKWw6JCbFsolzASBfZk=
Subject key identifier:   44:5A:C8:11:2A:81:7F:61:CD:6B:41:E0:98:A8:04:95:1E:FE:1F:D9
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584773966314E5C2207D9299C2C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     2158
IP address blocks:        192.46.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:63:14:e5:c2:20:7d:92:99:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=c765ee90-97dd-4159-b8ec-db02810db866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:95:bd:bf:6a:74:b7:15:03:db:d5:de:63:
                    ad:3f:86:85:5a:a8:d2:28:67:93:c1:c2:4f:2b:99:
                    86:07:3b:c7:dc:82:e5:14:e7:f2:4e:1f:20:9f:d5:
                    d6:d8:c2:85:64:f7:61:bf:08:34:67:3e:e1:78:30:
                    5a:11:16:ea:87:83:9d:7e:fd:d2:60:d1:ff:aa:5f:
                    cf:7d:82:9b:ca:ad:f7:af:01:64:20:19:02:58:55:
                    8f:4a:8e:45:2a:53:05:8b:e0:05:de:6c:8f:27:cf:
                    f6:40:e7:64:40:a9:7e:21:58:9f:8f:07:36:4e:40:
                    b7:7b:7b:e7:48:be:fd:67:43:2d:98:10:08:dc:5f:
                    be:5e:2a:86:c0:6a:2d:a1:69:40:24:c1:8b:23:3f:
                    43:33:81:04:ca:e7:18:22:b3:68:6e:74:3f:fe:df:
                    19:a0:3b:7b:00:be:89:8e:4a:46:b6:73:d1:eb:55:
                    b7:64:52:55:14:3f:5d:87:84:c8:05:c7:aa:69:7f:
                    00:9e:0e:75:f1:33:66:92:87:30:0b:8f:fa:75:5a:
                    26:45:0e:0d:77:8b:64:68:ba:ed:43:6f:80:5d:56:
                    a1:54:95:99:22:99:28:ef:36:67:0b:15:47:b0:42:
                    d6:0f:c2:1d:f6:72:75:a7:8d:50:12:49:74:4f:68:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:C8:11:2A:81:7F:61:CD:6B:41:E0:98:A8:04:95:1E:FE:1F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/79b37f01-5e21-3a59-82ee-5a030c1c5583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:d9:a2:0d:86:d3:ef:53:82:89:89:65:a9:62:a3:9d:e7:
         3e:00:ed:fa:f7:36:81:07:26:7c:d9:f9:fb:18:c0:64:08:69:
         91:eb:70:eb:53:94:4e:2d:de:e6:d0:ee:3e:cb:33:c9:5e:4b:
         7f:87:53:ed:c3:76:43:d9:3a:13:61:31:11:8f:fd:5f:a5:6a:
         8f:88:02:de:6f:a6:8d:17:ea:20:aa:ad:7b:fe:f8:29:a7:1c:
         1e:db:f6:ab:7d:a4:0f:7b:1c:ec:2f:0c:d8:07:b0:53:24:0c:
         19:ea:64:d7:02:50:97:d9:2a:c0:b7:5e:8b:ce:fb:4e:23:2a:
         06:d4:58:0a:48:cd:3e:c7:8a:4a:bc:b2:34:37:e5:ae:37:f3:
         e2:08:91:67:b6:79:fb:05:ce:8c:eb:2a:ce:75:fd:68:42:90:
         19:f3:5f:e3:ac:e6:a5:9f:e6:9e:07:0c:f3:54:b5:53:c9:ac:
         58:c8:47:5e:a1:68:72:3b:a1:48:43:8b:4c:1d:61:3f:e0:37:
         df:b5:4f:c3:e0:e7:80:b2:31:7a:f3:15:03:33:22:99:bf:da:
         d0:92:67:f6:5f:ab:13:1f:17:f9:b7:bd:d4:97:4f:85:9c:40:
         f2:61:1c:85:fd:45:3c:14:58:43:b2:2c:c1:d6:e9:a6:4a:5b:
         96:83:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:33 2024 by rpki-client on console-fra.rpki-client.org