Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa
File:                     94d78e80-6902-346e-b310-45f257fd76f1.roa (raw, json)
Hash identifier:          OePRBVKmSID0WKooV7L4JNswgjKsYDgMFTXR5/ItWKE=
Subject key identifier:   00:AA:72:DA:14:9C:E6:94:4A:80:94:29:A5:A9:9C:4C:4F:85:77:8D
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F43285847E1FA19A0ED413B37C94F5180
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     53281
IP address blocks:        204.152.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:19:a0:ed:41:3b:37:c9:4f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=c092fb37-367a-43b5-8ebc-007eb849e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:38:23:e7:e8:bd:7a:fb:2d:09:76:fc:77:
                    d9:f1:e0:96:ee:91:76:09:1c:5c:75:97:bb:1f:c1:
                    f9:20:10:1f:f2:ef:27:df:6b:ed:40:d6:08:3c:40:
                    85:ec:3e:63:26:e4:5c:61:d2:38:f3:60:90:29:4b:
                    89:82:29:91:6c:2c:fd:3b:23:24:fa:b7:31:11:3d:
                    12:0f:8d:d3:fa:f9:c6:a4:f9:0e:db:8f:0a:2f:0d:
                    8f:3d:0c:1c:26:5b:3c:7b:0e:4b:ac:bc:98:6a:08:
                    88:18:3b:0c:41:c8:29:1b:02:1b:fe:24:12:a4:84:
                    77:dc:93:ae:24:b5:f6:65:56:c7:e4:da:53:4d:f9:
                    6d:26:84:83:77:4c:c7:ac:33:a1:33:a1:6a:e1:e4:
                    d6:ef:2a:64:04:5b:e4:28:27:b6:15:7a:2f:44:fd:
                    8e:c0:61:72:5c:64:40:ad:00:ae:41:13:fc:1c:49:
                    07:ae:66:af:75:ec:04:ec:34:58:db:27:b7:af:9f:
                    9a:64:18:e1:ea:96:66:68:d4:97:5b:dc:62:9e:9d:
                    ea:c7:d7:60:f0:27:91:2e:13:87:39:3f:4c:8e:ea:
                    66:57:64:e6:73:7a:2c:4d:34:65:05:fe:02:67:c1:
                    4d:39:8a:38:d9:41:fc:24:10:0f:92:04:bd:88:0b:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:72:DA:14:9C:E6:94:4A:80:94:29:A5:A9:9C:4C:4F:85:77:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/94d78e80-6902-346e-b310-45f257fd76f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:80:d2:18:eb:6e:0e:ff:0c:9e:a8:61:d2:f8:09:4c:ad:57:
         0d:7f:47:8d:cf:29:bf:6e:66:38:af:e2:b9:86:54:02:71:5c:
         70:68:cf:cc:bc:7b:07:9b:63:74:25:00:2c:23:d2:32:47:cf:
         b6:db:39:ab:28:2d:bb:b6:ed:94:d3:32:52:5c:94:5c:84:16:
         df:60:88:40:fc:b0:a8:07:dc:18:fa:53:c2:93:a2:5f:c8:f9:
         02:f1:85:63:a0:82:fe:1c:da:9b:03:bb:cd:05:49:ac:14:a8:
         07:e4:a4:f9:14:dc:ca:19:bb:d5:36:f4:1a:79:6f:e1:a0:59:
         90:bf:42:ff:a7:bd:ac:3a:16:98:45:be:91:cd:a8:6f:06:b3:
         37:05:24:db:45:f5:98:5f:f8:ac:f6:f4:5c:d0:b6:7b:a1:41:
         d0:ac:73:48:7c:54:ad:65:70:f4:de:1e:ee:b0:36:65:85:94:
         c0:bb:3a:ab:a7:43:e4:61:27:0b:69:96:df:8e:27:84:44:31:
         04:43:46:92:92:67:ef:f5:eb:d8:b9:f9:c1:5b:7a:70:49:d0:
         2e:17:c1:72:e9:2b:4c:b9:a5:d0:5c:4b:cb:b3:60:51:29:d1:
         e1:71:40:de:53:da:47:5e:58:60:b9:e2:a5:02:86:63:8e:d4:
         44:5c:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org