Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa
File:                     ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa (raw, json)
Hash identifier:          gE269rUqvh0m1PhQFK5rqJOEgL9anCfK4ZOq39IHO5Q=
Subject key identifier:   98:BF:D8:58:F5:E9:7C:7D:62:B7:8D:17:F1:37:19:12:D4:A9:A4:44
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285846F32ECE18214FA07951435100
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa
Signing time:             Wed 21 Aug 2024 13:08:45 +0000
ROA not before:           Wed 21 Aug 2024 13:08:45 +0000
ROA not after:            Tue 19 Nov 2024 14:08:45 +0000
asID:                     3477
IP address blocks:        205.166.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:2e:ce:18:21:4f:a0:79:51:43:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 21 13:08:45 2024 GMT
            Not After : Nov 19 14:08:45 2024 GMT
        Subject: CN=f0a76ea0-1fca-4e7b-8fa4-81220259befa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:54:2e:38:02:92:52:da:49:de:66:f9:65:
                    94:95:62:fe:08:45:9b:fc:97:c9:5b:11:ff:bd:f9:
                    16:32:ee:1b:6e:33:b1:33:37:c4:d4:c1:61:17:c0:
                    73:97:f8:c7:93:19:6c:cc:9d:bf:e4:b4:14:9c:97:
                    85:c4:34:c9:0d:7c:9a:42:d2:77:ad:96:79:c1:6c:
                    bb:ab:7c:1e:f0:35:84:aa:44:a7:42:70:5e:a0:36:
                    10:06:16:86:f7:97:39:1f:ee:ec:88:77:96:1e:48:
                    73:fd:04:fc:76:d2:84:ea:ef:40:5f:91:c7:9e:ab:
                    48:66:c1:9b:56:47:ea:88:fd:78:0f:cd:61:47:c0:
                    c5:00:15:8c:30:ba:e0:39:64:cd:8a:88:dd:38:5b:
                    e2:8e:18:9e:ea:3f:3a:6c:5a:b1:73:aa:a6:b6:89:
                    aa:7d:82:ef:fe:6f:bb:fe:56:be:db:5d:ce:84:a3:
                    75:64:4a:65:f8:39:bc:f9:f9:6e:57:3b:54:71:90:
                    a1:2b:35:45:cd:91:a8:10:07:f8:f1:bc:a7:d3:0f:
                    8f:e2:59:59:41:cd:ba:01:61:09:81:7e:26:ed:9f:
                    95:2a:f7:b3:cb:9a:e3:90:92:40:cc:ae:b4:67:d5:
                    cf:06:90:26:c7:e5:37:4b:d7:9f:b7:c8:47:8f:e8:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:D8:58:F5:E9:7C:7D:62:B7:8D:17:F1:37:19:12:D4:A9:A4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac3c5bd3-05ea-366a-a3ee-f01234e9dda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:26:fd:bc:4b:b9:b5:90:b0:32:c5:f6:e5:5c:f2:83:cb:31:
         bb:f1:07:0a:29:d9:5b:38:e2:71:94:52:eb:77:ec:b4:7d:8f:
         ee:61:eb:6e:60:1f:9d:ee:d3:1a:ba:d2:b6:26:9f:90:c3:00:
         b9:94:52:7c:c4:d5:06:96:9e:ac:11:fd:ec:46:28:af:3d:43:
         c0:6e:ec:19:2e:16:83:69:d5:df:b3:2c:72:54:93:6b:ee:d6:
         b8:61:0a:90:4a:66:eb:13:bc:f2:1d:34:fe:4f:5c:07:90:48:
         2b:4e:34:52:1a:be:e3:e4:40:79:5c:d5:a1:2d:0a:c4:df:ee:
         32:58:a3:cb:9c:d8:63:d0:66:18:17:e2:63:63:db:0d:ec:1c:
         b2:78:7d:63:ea:d5:8b:82:20:62:75:35:39:34:e6:c5:d1:56:
         9c:7c:a3:a5:83:6b:76:08:5d:fe:6a:2f:08:a5:c7:03:fc:67:
         e5:21:c0:1c:22:38:15:db:35:33:6b:1d:a3:64:6b:86:7a:67:
         86:0b:39:a4:db:1e:80:fb:97:a7:08:b6:5f:4a:91:31:a6:83:
         70:1e:e5:e2:b5:8e:29:39:73:ee:3e:a7:39:39:a7:15:ec:0d:
         68:fb:66:ee:96:f0:fe:ae:45:0a:aa:fa:bc:69:37:85:37:10:
         0a:06:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org