Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
File:                     8d86e371-b987-3a40-92a0-b73d73f009c3.roa (raw, json)
Hash identifier:          Pgid976oE+gMlKuyQwopVnQFQBRGPqE/ev1KSnnhps0=
Subject key identifier:   62:1D:AB:CD:71:F7:30:49:01:E9:43:59:3B:D8:AF:00:93:96:3C:CD
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858478CB6863CC5C80FBDA3530800
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394893
IP address blocks:        205.234.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:86:3c:c5:c8:0f:bd:a3:53:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=31a16451-a1aa-47ac-9737-7211522e7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:65:46:61:71:18:88:fd:55:c6:86:bd:48:
                    1f:a7:fb:5d:1f:1b:bc:48:00:d6:40:16:8d:d2:9f:
                    de:46:90:85:14:81:2e:5a:c3:f2:c4:f9:25:69:10:
                    1b:36:98:9e:ad:a1:ba:e4:3f:ce:50:db:0a:e5:ff:
                    b9:6b:6c:fa:09:c6:3d:4e:67:3a:8f:67:a8:63:a8:
                    62:d9:bb:3a:37:af:3d:99:b7:77:c0:af:30:16:7e:
                    0a:0b:8a:f7:d3:29:17:93:27:6d:71:f3:e4:a5:c8:
                    f3:de:36:0c:d2:b4:14:4e:16:38:01:da:0d:ec:84:
                    43:b4:8a:2d:25:13:07:f5:52:af:76:79:20:78:f7:
                    a3:bc:7f:e5:d9:f4:1b:ad:c3:91:df:1c:1a:4e:fb:
                    77:e4:74:09:88:cd:9b:53:82:a6:df:21:77:fe:bf:
                    bc:80:1a:e8:59:fd:da:89:9f:3e:c5:9b:db:91:da:
                    f4:25:48:7d:db:b0:72:79:a8:48:95:95:8b:5f:8c:
                    db:31:73:87:cd:01:01:d7:d8:90:97:53:0f:97:cd:
                    d4:6a:41:8a:26:fc:bf:6c:ed:24:ad:f6:41:af:1c:
                    6c:0b:6b:55:a0:d1:8e:c3:b2:ff:ac:41:4c:aa:34:
                    f0:8a:3f:a5:b7:d7:a7:13:04:b2:35:c5:34:95:1f:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1D:AB:CD:71:F7:30:49:01:E9:43:59:3B:D8:AF:00:93:96:3C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:34:97:dc:fd:f0:cc:56:51:ae:7c:b1:b9:b0:b9:50:5c:
         1d:da:b8:e7:ee:24:3d:fe:3d:3c:6a:ea:08:0a:7f:45:a0:8a:
         1c:ae:f5:7b:33:86:dc:ac:67:5f:fe:cf:28:71:8c:1d:8a:c9:
         d5:fc:b4:95:53:a6:21:56:ff:4c:ee:f9:fc:88:9a:e5:b6:c0:
         46:a3:da:95:01:69:49:80:d8:99:4a:bf:b5:b5:cc:65:43:a7:
         d5:be:9b:aa:12:c2:90:0c:ff:42:39:c9:0d:fb:b0:fa:bb:13:
         37:49:d1:ab:6e:af:92:d5:2b:73:fd:a7:d4:f3:77:9e:99:48:
         72:13:2d:c3:a8:6c:a8:09:a5:e7:5c:d7:8d:10:d4:26:e0:67:
         96:4b:2b:1f:0d:4c:98:6c:6c:89:c1:58:71:49:79:eb:a4:05:
         56:77:46:a8:13:59:fd:5b:6e:0e:ac:6f:d3:d8:58:96:8a:7f:
         10:ca:3b:ff:4f:65:cd:6e:dd:6d:7c:3c:34:42:c1:27:a5:ba:
         cf:b1:79:2d:50:7d:cb:02:1f:17:71:83:eb:56:29:ea:28:c0:
         93:91:34:be:62:09:2f:e0:f2:af:d1:02:9d:9e:3f:f2:ba:66:
         3c:9f:e9:74:e7:cd:75:a4:4f:ed:6f:47:d1:42:2a:82:c7:73:
         f7:3a:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:16 2024 by rpki-client on console-ams.rpki-client.org