Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
File:                     392f74fe-624d-3f70-8d51-c9bcea16980f.roa (raw, json)
Hash identifier:          t553Eiy68qaiibvCxYiDXoHDX9Fg5l3qdvhAqIAQSG8=
Subject key identifier:   6B:6C:B5:B6:3F:27:B9:69:90:54:69:92:35:39:56:ED:C9:6D:9A:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAB2903006597B4FF755A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        209.23.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:b2:90:30:06:59:7b:4f:f7:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8de41744-54c3-4a18-b839-edbd69ffc86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:0c:18:25:60:e6:8d:46:e4:93:1d:82:82:
                    e9:ce:97:5b:aa:3e:dd:f7:e7:ad:1f:f1:63:a5:4c:
                    f4:ee:67:aa:32:aa:9c:d3:40:87:3d:c3:b2:6e:ab:
                    6c:56:f8:80:39:51:97:45:14:9d:35:14:88:99:2f:
                    9c:a1:94:86:9b:09:d1:9e:32:8a:c5:5f:01:26:a8:
                    92:2e:24:0a:d1:0e:f1:3a:dd:49:54:eb:c7:bc:67:
                    1f:b4:aa:5d:fa:9d:e2:ac:e2:d7:6f:87:d9:a6:89:
                    ff:42:38:bf:cd:bd:cf:5d:f4:1e:5b:c2:cc:e2:0f:
                    ce:db:1c:8c:81:da:b3:f1:c2:2f:d6:3c:91:65:fb:
                    85:ad:80:b5:bd:b9:b0:63:ea:07:61:4a:dd:66:b7:
                    fc:84:aa:17:09:75:ca:23:2b:63:81:6c:95:7c:c0:
                    6a:99:08:62:bf:db:73:ba:9a:cc:b4:ed:4d:0d:7f:
                    0d:dc:80:ad:f1:59:4c:39:bc:da:0c:fb:de:ee:e6:
                    23:6a:5b:bf:ae:ca:19:4b:11:6a:03:18:da:22:e4:
                    5d:d4:14:4e:1f:f6:77:ec:43:f1:da:aa:fa:df:ef:
                    44:df:83:60:cf:f4:43:fb:e4:ca:d0:39:53:4b:8e:
                    cb:a3:d9:48:95:20:41:82:c0:ae:ed:ac:ab:37:66:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:B5:B6:3F:27:B9:69:90:54:69:92:35:39:56:ED:C9:6D:9A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.23.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ba:4a:f7:53:41:75:ea:47:2d:cb:56:28:0d:51:9c:17:df:
         e5:3e:84:f6:f5:62:26:a8:6c:18:f9:29:89:5d:18:db:11:5e:
         b8:a8:a8:8e:e6:5e:13:88:98:01:4f:ab:ca:b6:18:80:10:7e:
         07:d6:86:d3:2c:6d:fc:6e:7f:6c:49:6a:81:b8:cb:20:b8:52:
         98:f5:89:d4:50:b2:89:1c:8a:7a:67:03:71:5e:da:ea:98:09:
         23:5f:63:79:00:9d:5d:ca:da:eb:e1:cb:e2:65:5b:66:3d:75:
         fa:43:27:b7:ad:e0:87:c5:1c:b8:5f:5b:89:f8:a8:21:91:76:
         ae:e5:f7:83:e7:c5:cf:07:00:e5:b0:70:86:ca:0a:a0:e6:18:
         d6:8c:d9:27:ae:6e:1d:ef:72:b3:7e:03:87:aa:d9:1a:1c:71:
         1e:42:86:c5:cb:81:77:ca:17:75:7d:83:71:53:e9:15:86:ef:
         aa:70:05:f1:eb:25:43:f2:0d:84:77:ab:f6:d1:ac:48:05:39:
         ff:7a:64:68:19:2a:ad:58:ee:98:04:73:c4:72:7f:96:2e:3a:
         c9:e2:2f:93:5d:5c:74:5e:c3:e1:31:de:f7:c5:be:9b:80:27:
         be:39:3a:ec:81:81:5b:f4:a7:d7:bb:42:12:32:c9:5f:1a:00:
         91:f0:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:28:05 2024 by rpki-client on console-fra.rpki-client.org