Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/508de6fb-1dcc-3daf-a376-53cae2492f81.roa
File:                     508de6fb-1dcc-3daf-a376-53cae2492f81.roa (raw, json)
Hash identifier:          WSyNbVAZMVwq/75k8AiORPcCZojIAEhH7+5SwCkWIzw=
Subject key identifier:   6B:43:FA:9F:AD:16:AB:6A:FD:8C:F1:28:33:AB:C6:95:77:51:98:93
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16510E43798
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/508de6fb-1dcc-3daf-a376-53cae2492f81.roa
Signing time:             Mon 06 Aug 2018 20:18:36 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     15562
IP address blocks:        209.24.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:10:e4:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=613371e8-bce0-4149-93c7-22623fe31ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:45:9f:81:aa:e0:53:fd:bf:59:fa:98:98:
                    5e:90:75:3a:ed:0d:bd:84:42:61:c4:09:16:8a:56:
                    da:22:c7:61:05:a2:a2:00:f7:ec:84:ed:af:bb:c7:
                    8d:c1:c6:b5:b0:1c:7c:f1:28:2c:11:1a:ab:74:65:
                    cb:a7:75:63:c7:08:01:51:53:80:db:85:f7:d8:1e:
                    f5:b2:3f:3c:62:fe:dd:da:68:fa:d7:70:3f:46:05:
                    cf:6a:7c:60:e4:0e:5b:d1:7b:bb:20:65:8e:2b:10:
                    b9:f8:34:6a:b0:36:af:c8:35:17:1e:e8:4c:28:fb:
                    cd:99:df:15:35:71:4a:28:0b:3e:64:66:99:f1:6d:
                    1d:f2:2a:47:25:d5:14:e3:1c:53:85:75:96:49:7e:
                    e5:7f:43:a7:85:af:f6:da:69:83:fc:78:7e:1c:e6:
                    a8:2e:11:d5:2e:93:7a:41:8b:6d:ff:a4:dc:40:66:
                    ab:7d:a2:f9:a7:95:ad:1c:72:5c:cc:88:a5:21:8a:
                    a2:40:a4:63:b4:12:71:40:b0:80:5c:56:a1:b5:ca:
                    b9:aa:6a:bb:a2:ce:bd:f7:f6:7d:52:fc:90:8f:5f:
                    3d:6d:34:ce:f5:c2:f3:59:0d:b5:df:f3:b1:50:d9:
                    d3:08:40:6c:a5:5c:b2:9e:c1:cb:f9:6b:dd:ce:39:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:FA:9F:AD:16:AB:6A:FD:8C:F1:28:33:AB:C6:95:77:51:98:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/508de6fb-1dcc-3daf-a376-53cae2492f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.24.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:fa:fa:8e:cd:0a:02:ac:5f:cf:6a:c1:bf:3f:44:a0:8f:
         ac:c4:36:a5:2d:32:6c:26:af:37:ee:c2:28:50:74:60:74:49:
         7b:09:f1:fc:1f:ab:25:3b:c4:4b:87:4e:b5:6c:cc:35:a7:53:
         9c:20:2b:b9:04:5f:0b:52:b6:4f:67:6a:45:85:14:6d:99:50:
         5e:dd:24:c0:fe:1e:54:28:c6:1e:fc:26:aa:39:11:01:a5:c7:
         ef:2a:7f:4e:c7:80:8a:d0:b5:2a:07:d8:23:ef:2e:6f:ad:3b:
         91:70:2d:fa:a3:57:e0:f5:f9:ce:08:09:4f:d2:17:59:95:9e:
         e2:00:cf:95:14:91:90:0c:43:a7:4c:73:07:22:95:a5:7f:15:
         e9:e1:97:f9:90:7b:7f:91:17:87:62:c3:7a:d6:16:00:ca:c3:
         3e:dc:af:9a:27:ca:20:62:94:fd:df:cf:00:58:d5:e8:f0:06:
         63:d7:b2:dc:da:90:22:b9:8f:c5:49:37:fb:6f:60:bd:26:4e:
         d9:06:67:c9:a8:a2:45:62:11:e0:0c:ec:9f:9a:60:f3:e3:e6:
         a9:6a:fe:c9:53:36:26:65:1d:e9:31:24:45:65:f6:e1:8c:dc:
         a6:8a:31:07:69:4b:af:21:34:12:b9:12:df:f7:20:cb:37:16:
         b9:bf:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:58:00 2024 by rpki-client on console-fra.rpki-client.org