Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
File:                     d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa (raw, json)
Hash identifier:          Y8ZQVBKmytyyz+TEECIw+aEaP0BJATQJdacWgxOZ6+I=
Subject key identifier:   A6:B9:83:07:4F:97:3D:78:75:5E:FF:7D:27:2C:18:31:07:FB:8F:20
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847BEF6C827A00C8CAE9C153500
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     46606
IP address blocks:        162.144.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:c8:27:a0:0c:8c:ae:9c:15:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bf82077f-b939-4fec-9845-98d5536c44d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:86:33:d8:e6:33:5e:f7:c8:12:99:da:95:
                    10:8e:ee:7b:91:19:58:19:da:7a:59:26:5a:db:18:
                    2f:0b:23:bc:ee:6e:a6:2c:42:b2:8a:eb:61:b0:3d:
                    dc:e8:48:d3:7a:73:6c:34:68:3b:b5:3b:73:b3:65:
                    5c:55:31:44:dc:ba:50:66:5d:52:e4:95:8c:a8:a3:
                    28:4e:ba:da:11:73:f2:81:46:b9:68:04:cc:9f:83:
                    e4:9e:10:8a:8d:d1:ba:d0:3f:51:c3:8c:78:bc:41:
                    9e:33:25:df:dd:85:2c:4e:c7:69:53:e8:4a:bb:5f:
                    87:54:1e:d5:07:f8:06:f6:ed:6f:30:9d:73:77:aa:
                    ae:ac:f2:a8:05:ee:e4:3a:63:b4:fd:c7:ba:9c:8d:
                    2f:96:93:b2:36:64:e4:c6:13:87:a9:59:0a:68:67:
                    fd:18:8d:d4:1f:d7:29:06:11:c7:2c:a7:ad:db:43:
                    18:38:2e:fe:ec:3d:b0:da:d8:17:2d:cb:d1:db:25:
                    6b:bd:96:b8:3a:9d:ae:27:b2:d3:8a:15:96:b9:ff:
                    ef:5f:fe:75:27:4f:28:f2:2e:3c:8c:2a:0f:d6:54:
                    78:cb:b9:22:d3:28:bf:85:11:9b:3d:10:7f:c4:b2:
                    c0:aa:4a:f9:83:75:a9:c6:2b:5e:c7:43:28:1e:31:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B9:83:07:4F:97:3D:78:75:5E:FF:7D:27:2C:18:31:07:FB:8F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.144.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:63:53:ac:a3:f0:d1:dd:e3:4e:bf:d3:d6:5d:78:39:03:
         32:b0:d5:8b:60:dc:b0:8b:d9:9b:4a:a3:27:20:26:40:91:95:
         02:be:7d:28:49:85:77:12:52:a8:2f:5f:cc:3c:a5:28:4c:5b:
         36:10:49:cc:59:da:33:f0:4d:c6:9c:c3:f0:20:98:6a:a4:84:
         c1:30:96:e4:97:e1:52:1d:1f:16:32:75:aa:4d:37:12:ad:53:
         ab:ff:df:2e:72:84:f5:ac:e9:4f:7c:96:ae:36:57:b5:bd:44:
         e1:17:22:5b:9e:d5:30:f8:13:65:ea:72:b8:93:0c:05:8e:91:
         40:25:84:ac:a8:5b:aa:f6:02:4c:2e:db:72:b1:49:2a:36:53:
         40:71:66:04:2e:ca:9a:a4:0c:3c:78:e7:d5:73:7f:f7:c0:69:
         fe:37:0f:b4:23:71:6a:35:cd:80:e6:6f:c2:03:70:cb:de:92:
         45:78:bf:0b:28:b7:b0:2e:ab:4a:b9:03:fc:00:a8:7f:e6:0b:
         e5:69:90:48:3b:89:e0:d0:03:2b:cc:ad:59:b1:f5:55:04:b9:
         04:f1:a2:7c:b4:7a:07:c7:ec:c5:00:16:c6:be:05:23:40:42:
         41:4f:63:68:b9:af:8a:a3:b9:30:ae:6e:8c:ca:66:5c:16:bc:
         5a:a5:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:45 2024 by rpki-client on console-fra.rpki-client.org