Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa
File:                     e5299180-b70f-3125-a781-6b51c883c759.roa (raw, json)
Hash identifier:          KtOmLxQOt4khlLnbdOyc6Tl6IGYReuELRLndFvi3KYI=
Subject key identifier:   2F:D9:1B:B5:44:BE:BD:E0:6B:3D:96:D8:1E:C9:5F:BE:BF:2A:41:28
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858471FD5C36CD0ED2116F7230B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     204670
IP address blocks:        128.121.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:c3:6c:d0:ed:21:16:f7:23:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=08794938-64c4-4b39-83f9-7396570dae75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:50:1c:23:7c:de:e9:49:87:9d:aa:60:26:
                    87:91:a8:bc:47:ee:c7:b0:6c:d3:b8:7a:24:4f:e9:
                    5c:fd:5c:79:ab:22:01:6a:f3:6f:bc:79:0d:38:88:
                    6f:1b:e9:b6:a7:ad:c1:fc:5c:8f:9f:ee:15:a4:a0:
                    a7:6d:a0:d8:f9:49:63:6d:62:b5:28:75:1a:71:a3:
                    36:9d:ea:cf:17:f9:3c:b3:f6:8f:f9:d0:4e:c9:72:
                    45:83:d4:d9:b7:db:26:e1:34:65:cc:46:44:4d:28:
                    51:59:fe:5e:91:fc:13:b8:df:e0:ca:77:eb:91:d0:
                    8f:05:af:53:18:38:ce:07:a8:31:82:bf:dc:5d:a6:
                    86:bc:5f:81:89:cf:0a:66:47:ea:6e:74:12:57:fa:
                    5d:22:3f:2d:d3:cc:89:84:93:75:ad:7a:3a:45:d2:
                    13:2a:cb:85:f3:36:8f:e9:bf:2e:f0:38:21:a6:a7:
                    87:07:a1:ba:d0:73:17:3d:e9:9b:95:d1:63:39:db:
                    a4:42:e9:fa:f6:11:0f:de:4f:0c:31:a4:c7:c0:97:
                    e5:cd:8d:9f:92:61:f1:61:60:07:28:68:ce:61:0e:
                    d3:e0:57:0d:bf:f0:98:04:cf:b6:d5:c4:75:86:28:
                    17:4c:84:b5:b1:5d:40:03:b9:ce:0d:70:2d:76:b2:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:1B:B5:44:BE:BD:E0:6B:3D:96:D8:1E:C9:5F:BE:BF:2A:41:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b0:6f:5a:f6:ec:79:44:37:2f:0d:7f:2b:3a:54:95:f1:35:
         38:b6:85:9f:d5:6f:bd:e5:69:0a:b5:0b:24:c5:91:e4:6a:c5:
         d3:59:6f:14:8b:4c:e0:c4:88:6e:35:79:ec:f7:0c:70:2b:14:
         b0:3d:ed:b4:33:3f:89:9c:8e:70:c8:a1:d0:87:8c:ff:d5:89:
         f3:85:c8:ca:dc:05:e1:27:e6:82:8d:cb:8f:f6:16:4f:ed:51:
         6f:a6:2f:81:71:31:69:96:af:f3:98:11:96:b6:c5:dd:6e:65:
         59:ae:41:cf:bc:91:a3:31:14:e2:46:8b:13:55:2d:f9:32:1a:
         76:4c:01:14:6c:1d:4f:fb:4e:ed:d5:d7:fa:99:97:2e:f1:a5:
         8e:e5:02:f3:d3:b8:d2:c9:e3:b9:f8:13:37:6f:4e:56:7b:2c:
         58:3c:61:80:be:bc:c9:2f:b7:f3:bf:50:ae:31:14:15:28:a9:
         e0:4b:ee:f4:53:55:65:e5:b2:50:95:65:cf:7f:9c:fd:66:b8:
         ec:39:38:16:c4:2d:00:90:3e:1c:85:e4:57:b6:9a:69:e1:6a:
         f4:e3:fe:fd:f1:d9:80:57:54:f9:b8:b7:b6:e2:19:f5:19:32:
         27:cb:de:fb:21:f0:83:ad:b8:64:f4:e8:e4:5e:ad:16:22:0f:
         46:5f:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:09 2024 by rpki-client on console-fra.rpki-client.org