Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
File:                     d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa (raw, json)
Hash identifier:          C5O5B5i5FuGnmGP4KyT6RWYAqiPa3VD7DXZA6XLX9YI=
Subject key identifier:   D2:8B:6C:49:28:E2:22:45:7A:85:BD:6B:BF:C4:6B:27:E6:F7:C2:84
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584734C73476B8E01451606E0048
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     3477
IP address blocks:        205.167.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:34:76:b8:e0:14:51:60:6e:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d1ea07d9-9bb0-4773-beb8-2f91485ea44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:ab:69:68:42:cf:50:66:47:2d:57:07:5d:
                    28:8b:ed:26:30:df:02:0f:72:be:3f:24:b6:9c:83:
                    52:55:16:68:51:63:18:39:d0:b5:7e:ae:1a:d5:87:
                    77:3f:74:2e:2f:92:4c:4f:3c:10:4e:e9:ee:22:98:
                    1d:bd:12:03:95:48:71:70:4d:9c:dc:08:f2:0e:eb:
                    e2:65:e0:9a:de:d7:41:b9:e4:a7:98:d9:b5:bd:5a:
                    f0:ad:50:e8:17:a1:44:35:aa:9f:22:3a:04:d2:ba:
                    3a:79:ef:ba:a3:ac:97:1f:ec:79:05:d2:7b:6d:61:
                    3d:d9:08:04:89:0b:ca:82:46:98:51:ff:c5:1e:16:
                    e9:5c:13:3d:1c:41:da:01:a8:78:a1:31:3b:a4:4b:
                    ec:83:ed:26:16:21:99:00:e7:a6:c2:40:b7:7a:6c:
                    d8:bd:7f:02:34:ee:9f:91:4d:e4:7b:07:8b:4e:da:
                    25:fc:2b:a9:34:70:f9:15:11:5e:fe:b1:fa:4a:a3:
                    2a:fd:31:de:8e:bd:c1:8e:fb:c9:e2:53:ac:5f:51:
                    5b:05:a8:7a:d0:3d:9d:f7:eb:1b:57:8d:9e:5c:47:
                    b7:d2:b3:cb:35:1e:56:1d:e0:1e:e5:20:bd:ae:2b:
                    e4:3c:f3:7b:4c:e6:d0:09:9d:6d:aa:7f:75:48:4c:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:6C:49:28:E2:22:45:7A:85:BD:6B:BF:C4:6B:27:E6:F7:C2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d8ae5afb-1453-3bfe-a102-39edf8aee6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:16:eb:b3:bf:59:3c:73:c5:66:1d:86:71:11:6a:b8:77:91:
         e6:38:04:b9:07:16:61:a9:a6:ec:e2:26:6f:59:f8:8b:da:83:
         fc:05:29:37:70:d4:9f:6b:96:dd:36:12:3d:6a:ef:98:89:8f:
         d0:df:59:15:3a:dc:dd:56:d9:b9:21:b3:42:6b:8c:3d:d5:3d:
         a6:f9:ce:3a:4d:5d:20:11:50:98:cd:5c:a5:48:96:2d:a9:39:
         ba:d7:c6:e6:e7:0a:d0:5d:6a:37:ea:47:c3:4f:a6:8d:ba:66:
         7e:08:93:00:7e:fd:15:43:85:af:43:4b:7d:63:dc:ad:2f:32:
         a2:2d:c6:37:89:19:4b:79:8e:c8:21:ea:78:50:9a:89:16:2c:
         55:bb:7e:87:53:6e:4b:85:1f:1f:7f:18:ef:65:32:45:38:bb:
         2c:03:92:6e:5b:a3:19:56:fd:8b:b9:9b:43:58:4d:1e:16:c8:
         26:b2:af:9e:1b:4a:ad:76:65:fb:65:de:01:da:34:da:39:14:
         ac:ab:15:fa:9d:de:02:f3:de:e0:02:76:8a:7e:a3:3a:da:6a:
         71:cb:a4:52:33:2f:e3:01:7a:45:90:7e:ef:19:94:3b:6b:bd:
         3b:8e:ca:f1:72:0c:6e:83:a4:b4:7b:b1:2d:82:06:ca:11:e9:
         bc:cb:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org