Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
File:                     cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa (raw, json)
Hash identifier:          jOebQZRBp8+7Qkcxjjgt27ZFQ5BhEjtu1Ak/OwDD/dc=
Subject key identifier:   4B:E3:D0:83:69:7A:46:35:E2:63:69:46:A9:A0:AB:10:87:CD:BE:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847686B932797895D970FAD1600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     7342
IP address blocks:        209.131.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:93:27:97:89:5d:97:0f:ad:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=786da891-b743-4001-8ecc-4b8c026768e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:40:1c:4a:fb:11:9c:ad:53:ec:da:df:b6:
                    fc:dd:9b:14:c6:5d:fc:ff:26:f6:08:6a:98:25:45:
                    cb:d5:9f:f6:b8:22:76:61:d9:96:20:45:6e:a2:32:
                    c0:4c:9b:34:e5:45:c0:2f:fc:e2:c2:9f:0b:ed:de:
                    93:d6:c5:aa:20:3b:37:bf:bf:bd:5a:a8:f2:84:a8:
                    3e:ad:8c:a8:c3:9b:ed:cc:59:44:16:2b:49:bd:07:
                    21:a5:29:a5:0b:02:60:4f:a5:7a:49:80:16:21:e9:
                    2c:af:80:0e:b6:1e:dc:db:9d:d3:ac:2b:92:8e:f8:
                    3e:83:0b:11:ae:c9:a5:4f:ac:44:5a:ac:95:94:16:
                    41:36:fd:cf:0f:9e:92:d8:9e:33:6d:2e:43:18:c8:
                    8d:c2:f8:4f:a4:7d:c3:02:97:4f:19:08:e6:25:38:
                    d1:63:60:49:4d:a1:eb:0a:db:f3:90:72:18:eb:0e:
                    6e:6c:68:88:23:d5:20:17:2a:94:91:56:7f:39:8f:
                    98:45:d1:f0:a1:a8:f6:5f:f6:a5:31:e3:12:f1:28:
                    7b:9d:1c:86:c8:80:89:4b:f4:f4:48:63:c4:86:33:
                    b9:a0:e6:0e:63:29:1e:5e:38:49:a3:ee:20:6e:95:
                    ec:54:5b:2e:af:91:8d:fe:0c:f9:15:87:df:64:cf:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:D0:83:69:7A:46:35:E2:63:69:46:A9:A0:AB:10:87:CD:BE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:e8:5f:8f:da:2a:8a:f9:ec:95:a6:4e:81:ca:38:a0:8c:
         d5:7e:4c:67:0a:62:7f:4d:09:95:47:c0:f6:58:58:56:e2:f8:
         91:5d:47:a1:61:4c:cd:d5:46:f7:2a:a2:1e:60:f3:dd:69:f2:
         77:f1:3b:71:38:b7:74:48:cc:48:b5:45:f8:90:79:f6:b9:de:
         ff:23:59:2b:a2:71:33:52:03:ff:e9:1d:26:54:ea:70:b3:93:
         06:c4:1d:e3:0e:0b:90:eb:bf:3c:0e:82:0d:01:ea:49:55:f5:
         0c:31:0f:1e:8a:65:4c:b4:73:23:b0:c0:83:b0:35:fc:25:f0:
         f1:65:a9:9f:d6:f5:2e:9e:b5:4b:44:d9:fe:31:01:35:72:0b:
         56:ca:ff:e2:83:a2:cf:91:8f:7b:8f:02:b4:b4:8f:1f:8f:16:
         23:9d:48:60:e6:28:54:86:72:27:1a:93:7e:b4:15:d4:9e:c3:
         de:64:e5:2d:cb:71:dc:eb:9f:f7:a1:1c:26:3b:92:27:d6:61:
         2f:8d:fa:de:ac:bb:b5:a0:96:9e:b1:a7:71:4b:24:3a:0c:3e:
         99:43:d3:be:45:9e:72:56:46:3e:43:e6:c8:ca:aa:f7:4b:7a:
         f9:a2:50:50:87:d3:18:bb:83:d2:60:7a:ff:21:8c:c2:cd:10:
         6c:5f:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:47 2024 by rpki-client on console-fra.rpki-client.org