Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0e01b300-c9f5-3a8c-b9df-709b2b029b1f.roa
File:                     0e01b300-c9f5-3a8c-b9df-709b2b029b1f.roa (raw, json)
Hash identifier:          m0x0STjPzUEvG8mk+mdw7E7qWBvEnl5lDadJTfqhoq4=
Subject key identifier:   57:7D:80:8B:31:EB:72:5D:8D:95:C9:35:CC:92:F3:EC:28:05:E4:B0
Certificate issuer:       /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial:       010D0C9F43285847600B7E723E3994BF0ADC5800
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0e01b300-c9f5-3a8c-b9df-709b2b029b1f.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     10469
IP address blocks:        209.240.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:7e:72:3e:39:94:bf:0a:dc:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=1132f4b2-6e19-44f8-be65-d9d86582f378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:0d:42:11:0c:de:17:77:e2:96:e9:45:33:
                    45:84:14:ec:a1:e6:15:54:a2:32:54:28:f2:0c:c5:
                    76:2c:5c:15:cd:bb:22:4e:bc:54:76:6e:32:89:01:
                    fa:83:81:4a:e6:2d:93:89:c2:a3:fe:8c:ac:4c:7f:
                    79:5c:34:0c:8d:13:97:a1:41:3c:c6:27:9a:d1:05:
                    ec:43:89:f9:de:c8:b9:89:0a:8f:e9:4f:20:30:b4:
                    2f:4e:f1:7c:8b:f5:cc:4c:52:d6:c3:67:0f:f0:6b:
                    75:73:d0:c6:60:c7:8c:f3:4b:c1:71:46:49:2e:f6:
                    dc:ac:95:bc:67:a7:28:f8:59:05:bf:62:bf:e3:f3:
                    fa:77:61:07:a0:81:c2:87:c9:b6:fb:32:7f:1d:b5:
                    b2:64:4b:d5:c3:89:cf:01:26:49:5a:a4:7d:11:98:
                    a5:25:e2:b6:8b:fb:fc:41:33:39:bb:cb:8a:25:c1:
                    73:24:34:98:1d:32:ac:1f:82:17:94:8c:16:00:49:
                    fc:fa:b0:11:6e:48:93:ba:e1:23:d6:08:2d:95:b5:
                    e1:34:ba:4b:ef:6e:89:48:47:24:24:f4:88:42:90:
                    5c:5e:fb:c8:13:35:f1:00:30:29:b0:e7:15:30:23:
                    d9:6a:60:1d:29:f6:a1:6e:94:58:75:25:35:db:3e:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7D:80:8B:31:EB:72:5D:8D:95:C9:35:CC:92:F3:EC:28:05:E4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0e01b300-c9f5-3a8c-b9df-709b2b029b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl

            X509v3 Authority Key Identifier:
                keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:44:f7:a2:08:a3:8c:d3:b1:89:7f:58:9d:57:a3:8a:0e:
         84:0a:5e:78:df:ba:5c:1d:ef:37:fc:22:fc:76:49:e8:e1:ac:
         47:14:03:3a:1b:aa:42:17:f3:56:76:e8:3f:b6:af:95:2c:93:
         b8:68:6e:fc:06:e4:02:ed:72:49:97:eb:aa:e2:c7:97:2b:bf:
         ae:32:de:df:aa:ba:7e:23:3e:89:4a:8a:10:d7:13:3b:60:f2:
         5e:2d:38:03:48:85:c1:71:34:a8:08:21:69:dd:3e:e8:57:d9:
         2f:a3:46:bb:4a:8e:f7:6b:4c:ca:f3:ed:d7:23:14:53:7f:93:
         13:46:a5:d1:5e:3a:e0:0a:f9:6f:d0:bc:38:cd:fd:2e:a0:65:
         6f:3d:b0:44:64:c8:5a:2b:e0:c9:2e:68:74:7f:16:19:30:75:
         04:31:58:f4:80:cf:4c:69:fe:71:48:a5:88:e9:d5:7d:b6:f3:
         2d:bb:6b:3f:1c:17:e5:93:35:8b:a5:26:66:18:e5:1e:a6:50:
         19:04:1e:7e:1e:f2:7a:42:fa:51:3e:7d:67:53:4f:94:bb:c7:
         17:40:32:79:a5:6c:1a:f0:5d:5f:44:10:6b:f3:dc:b3:06:e8:
         c1:1d:90:04:79:e8:69:f1:78:40:64:28:b2:47:13:65:79:e6:
         0a:35:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:17 2024 by rpki-client on console-fra.rpki-client.org