Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/af2cdef0-0628-3cdb-9b8d-28a384489aca.roa
File:                     af2cdef0-0628-3cdb-9b8d-28a384489aca.roa (raw, json)
Hash identifier:          Lfh/xwwIFGeAMRxN58LbjRjeDA/FrGJbrpWqkBgO/+Q=
Subject key identifier:   1A:70:A4:82:6E:B3:27:F7:AA:7C:CF:0D:57:C1:95:87:8B:8E:95:6A
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F432858475EA621122DF603D92D4B5500
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/af2cdef0-0628-3cdb-9b8d-28a384489aca.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     27773
IP address blocks:        200.12.226.0/24 maxlen: 24
                          200.12.229.0/24 maxlen: 24
                          200.12.230.0/24 maxlen: 24
                          200.12.232.0/24 maxlen: 24
                          200.12.234.0/24 maxlen: 24
                          200.12.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:21:12:2d:f6:03:d9:2d:4b:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=33da221f-4a25-41e9-8078-d8c839db3208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:8e:1e:fe:2f:6a:f5:d5:5d:24:37:23:4d:
                    00:10:4c:1a:af:09:04:ad:86:b7:f1:8a:92:9e:1b:
                    74:a5:6f:b8:bb:4d:1d:e5:2b:63:aa:81:4a:d1:87:
                    76:06:57:bb:8b:43:44:43:c8:b6:ad:5d:7b:47:df:
                    1e:49:a1:02:a9:de:fc:9b:c0:4a:b3:d3:e3:da:8f:
                    b8:38:d9:f6:ce:43:f7:16:64:da:80:1a:41:d3:32:
                    b9:7d:84:f6:b3:d9:4f:ae:55:67:40:bb:bb:59:00:
                    fa:9d:cd:ca:99:3c:d5:d9:9d:48:11:d9:c0:15:3d:
                    29:83:7b:71:2e:e5:4b:37:6d:61:b6:9e:47:37:7b:
                    0e:d1:00:70:24:d7:11:a7:e6:9c:2b:e1:b0:09:f8:
                    b4:a9:88:24:02:4b:11:b4:de:56:3e:79:2c:f1:09:
                    4c:6d:27:bb:1b:a5:48:f6:7c:f9:e6:f7:53:25:6b:
                    63:4d:36:db:d2:1a:86:f4:81:0e:70:ff:e5:71:4a:
                    a2:b3:c5:69:df:f8:c1:7d:94:6a:99:ec:84:46:bb:
                    51:cc:cb:59:5c:33:e0:3f:4d:29:74:99:e9:89:05:
                    93:15:3f:ad:52:28:df:c1:09:7b:e1:aa:ea:1f:ca:
                    c5:5b:bf:8e:6e:9e:55:18:da:0a:bb:cf:b1:07:4d:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:A4:82:6E:B3:27:F7:AA:7C:CF:0D:57:C1:95:87:8B:8E:95:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/af2cdef0-0628-3cdb-9b8d-28a384489aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.226.0/24
                  200.12.229.0-200.12.230.255
                  200.12.232.0/24
                  200.12.234.0/24
                  200.12.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:bf:36:81:74:a2:d7:32:a8:00:51:e5:e2:9a:40:a5:ef:
         8c:0b:3e:20:35:53:0a:47:74:1b:f6:2b:67:7b:e0:44:e6:62:
         3b:77:d3:47:a1:8b:36:88:90:24:e8:4a:81:7a:65:d9:e1:fa:
         6a:2f:80:75:a8:fa:cd:2b:ec:b0:28:6c:08:da:58:11:b5:69:
         b4:2d:12:35:a6:64:f0:bb:56:35:50:5f:1c:2c:82:7c:f8:4f:
         df:f7:fb:ad:6d:db:79:a3:6e:07:11:bb:fb:c5:11:88:51:a0:
         96:4c:7a:85:81:74:56:e2:50:d5:fb:f3:27:dc:25:b9:f3:16:
         d3:11:e6:31:02:a3:dc:9c:28:7a:80:c0:e6:80:fc:73:ca:74:
         11:de:e3:04:53:01:4f:1a:01:14:29:a2:3a:18:8d:7a:66:4a:
         b9:09:cc:4b:56:e8:46:eb:b0:fd:4f:48:4f:b9:a2:09:3f:88:
         4d:b4:76:8e:17:a5:a4:8c:12:5b:66:d5:56:80:b9:41:06:f9:
         e7:82:a1:30:e0:73:af:d7:2d:a9:c5:62:a7:2d:a8:99:e3:e0:
         0c:69:3e:74:7a:4d:e9:8b:51:ca:a9:d1:4d:93:02:d6:80:32:
         4a:3a:d9:1c:18:5a:05:88:29:6f:2c:da:65:df:d9:e4:a0:68:
         10:ab:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:36 2024 by rpki-client on console-fra.rpki-client.org