Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File:                     abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier:          Fiz0Hp6SNX3pMGVeSiykZmmYENWNB4MboMbrd+atB0w=
Subject key identifier:   7A:0D:EC:F2:26:51:BC:14:5D:88:E3:CB:B7:C8:D5:8E:04:87:70:AC
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584726D07957F7BF3CD7BF506E00
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     395287
IP address blocks:        192.104.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:79:57:f7:bf:3c:d7:bf:50:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=8fc1bc6b-d8b2-43d0-bc3e-f7a489dbb3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:4d:ed:de:3e:32:8f:a9:a0:65:da:e7:bd:
                    01:9f:16:87:c7:37:a1:3e:02:7c:b0:83:a6:0f:fb:
                    eb:15:57:9a:5c:ed:f7:cc:29:ad:50:49:38:8c:56:
                    24:af:a7:24:7c:d7:c3:f6:90:04:7c:4e:0a:cc:73:
                    e5:7a:8a:98:c7:49:8b:a9:3f:39:1f:72:e7:65:85:
                    33:86:68:1a:fb:23:c6:e7:48:2d:71:f8:5f:93:25:
                    71:34:0f:0b:5f:63:23:c8:ff:82:b9:78:98:81:81:
                    12:48:de:8b:e5:54:65:61:80:5a:c1:76:f5:95:4b:
                    76:3c:93:ee:42:1d:b2:bf:4c:7f:77:fd:d8:cb:cc:
                    5d:1d:bd:4a:19:d6:d2:05:5c:52:8d:e6:46:67:a7:
                    fe:60:96:56:d2:fb:1c:86:0e:65:46:2f:07:77:9f:
                    e3:01:e8:6c:2c:42:e1:f2:e0:f5:8c:dd:67:1e:05:
                    7a:7a:95:9c:60:dc:1c:34:a4:74:3a:49:80:d2:77:
                    ae:34:17:03:a3:c8:1e:b5:f2:58:4e:b7:c2:b8:cc:
                    0b:5a:29:32:7a:e6:e4:bd:f2:45:1f:e5:d5:b4:c5:
                    0f:51:8d:8b:49:4c:06:6b:c5:ac:81:c7:aa:1c:24:
                    44:15:0d:43:0e:fb:f0:35:d9:0b:35:21:1a:f9:60:
                    ad:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:EC:F2:26:51:BC:14:5D:88:E3:CB:B7:C8:D5:8E:04:87:70:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:85:6f:83:e4:b2:d1:6d:68:6b:2f:df:9a:7c:cf:fc:7c:
         9e:50:ae:15:eb:a4:1b:1d:02:16:86:69:d6:d0:6b:8d:63:9d:
         12:10:e8:2c:a6:e0:40:d8:e6:45:99:9f:fd:b4:ea:c4:24:84:
         ee:9d:c0:73:73:ee:78:c7:19:c2:b8:c4:6b:01:74:bc:d9:11:
         7b:3c:98:7a:60:9c:70:5b:eb:c2:fe:b7:66:c9:25:9e:3b:9b:
         34:ca:3c:4b:a9:5d:78:ce:29:d9:0d:60:75:8a:c5:78:ef:bf:
         f7:f9:16:1e:c8:e8:2f:a8:6a:f8:b8:f8:5d:d7:a8:f8:00:8c:
         c5:3d:8d:75:8a:95:39:45:76:b5:d8:55:2c:f7:98:c8:57:52:
         61:a0:cc:95:11:19:aa:c3:bf:fc:ca:09:47:75:77:2c:89:16:
         60:85:00:e5:11:aa:3f:b8:c7:01:14:cc:2a:b8:23:2a:44:95:
         c4:46:f6:99:2c:c8:ab:56:3c:98:b4:36:f6:01:fd:5f:a2:87:
         f0:bf:eb:58:79:7f:ee:5c:94:ff:9d:4f:a5:ff:83:ec:41:7f:
         d0:01:0e:10:f3:61:b2:12:39:51:c2:25:97:81:15:3b:2b:73:
         94:6e:85:e9:c4:b5:e6:1d:33:e4:45:a4:4a:06:5b:17:87:4b:
         b1:ff:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:34 2024 by rpki-client on console-fra.rpki-client.org