Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ebf34b9-9a17-39d7-9828-e401c35da5dd.roa
File:                     9ebf34b9-9a17-39d7-9828-e401c35da5dd.roa (raw, json)
Hash identifier:          A6zkyNYRtnmOU4A7buZOkuK4YrUiimceMEXOC/5afNE=
Subject key identifier:   B7:32:9E:B6:B0:F4:18:9A:90:48:9D:CA:B7:38:05:FD:C1:DD:17:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847686B9711616DD5CCC4A7E480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ebf34b9-9a17-39d7-9828-e401c35da5dd.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     7342
IP address blocks:        209.131.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:97:11:61:6d:d5:cc:c4:a7:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=f80f819e-2efe-4db5-8f88-63ff50c5d1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:b5:64:4f:dd:f0:29:9f:b1:db:94:f1:e3:
                    6d:47:c7:20:08:c8:f7:21:3b:75:75:2c:8d:d6:97:
                    e7:70:22:32:02:fe:f1:e8:2e:ba:82:89:3e:87:83:
                    fc:fe:ff:9b:24:96:58:64:d0:04:c5:34:a6:65:29:
                    54:5b:3c:34:c5:4f:5f:19:af:ba:d1:33:f9:5b:08:
                    84:d8:d2:7e:c0:ee:46:0e:05:a3:9e:d2:63:e3:d9:
                    40:e0:11:b5:f4:f1:78:a1:eb:16:d4:fc:7d:0a:04:
                    0e:64:00:3d:f1:1a:b7:63:ae:0e:4b:48:27:1e:ba:
                    1a:10:36:28:f3:8b:01:d6:c1:83:f4:45:ed:e1:57:
                    eb:3b:22:6f:38:0b:0f:96:c6:65:1b:a8:ba:ba:ff:
                    e8:61:82:94:02:24:29:06:3b:4e:17:0d:49:46:8b:
                    d4:4b:1f:43:e5:f6:0e:81:32:ac:ea:f0:63:84:a7:
                    8c:2f:8c:71:88:d9:27:01:71:85:ab:e9:bd:99:82:
                    e6:3c:ea:f9:9f:ff:a6:f5:3c:96:26:c6:d4:f6:17:
                    63:ef:6d:96:f2:8b:06:d5:b9:b5:5e:62:76:b7:fc:
                    26:4d:cc:ce:5d:f0:71:8a:96:e9:7f:66:88:c8:e0:
                    5f:5b:bd:d9:39:4a:a9:98:8e:b7:7e:31:ca:82:84:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:32:9E:B6:B0:F4:18:9A:90:48:9D:CA:B7:38:05:FD:C1:DD:17:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ebf34b9-9a17-39d7-9828-e401c35da5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:33:ee:b0:71:0f:91:df:b3:0a:40:3c:3b:f6:af:ca:f6:
         58:52:e1:6d:fe:ba:27:ea:5e:50:7d:1f:3d:62:0d:d6:25:4f:
         10:7f:19:41:ed:33:f9:3b:47:1e:17:f6:c5:17:30:74:57:1d:
         e0:66:2d:7a:7f:02:a4:35:ee:c4:d1:4c:59:ea:4e:68:d4:3a:
         81:b6:3e:ee:80:38:55:2f:28:14:c5:91:1b:56:56:4e:94:08:
         21:88:e7:bc:77:36:a7:7c:64:a2:0b:77:f6:71:4d:4d:f8:03:
         ba:4e:97:bc:ac:5b:08:b3:d1:92:87:e8:b4:d7:be:a8:b2:b5:
         51:ac:27:9d:f8:e9:11:f3:d1:3d:bb:b9:72:f8:30:de:03:a3:
         a5:d5:63:07:42:20:e0:50:35:2b:dc:d5:46:fb:38:ea:01:aa:
         1f:be:87:7a:c4:33:34:7f:4f:f2:57:3c:01:7e:55:d5:f5:08:
         5c:22:db:72:f8:a5:9c:6b:9e:8c:28:87:62:55:6b:86:cd:10:
         66:89:b9:53:a2:9b:a7:3c:ae:aa:aa:2d:0a:ad:56:c1:4c:6a:
         51:5b:2e:10:42:6b:44:f4:dc:8c:8b:0f:ba:1d:1a:24:9b:92:
         28:cb:c1:7e:13:0b:66:9a:0a:ea:db:66:10:7e:42:74:a0:ae:
         e6:dd:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:37 2024 by rpki-client on console-fra.rpki-client.org