Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa
File:                     8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa (raw, json)
Hash identifier:          cn522RhBS1daxV1xY7wb8lTqMPIHIFQ7k4+qkkftD1U=
Subject key identifier:   4C:89:DE:4F:8A:DB:28:F8:47:25:EA:30:D2:86:A6:B5:91:FD:2C:B9
Certificate issuer:       /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
Certificate serial:       010D0C9F43285847362B55B7CDA5329458F3B3C0
Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     26457
IP address blocks:        158.51.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:55:b7:cd:a5:32:94:58:f3:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=3d7a0962-bec4-4204-8c86-88e841e6498c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:48:b7:7e:de:4e:25:78:da:e6:1f:c7:62:
                    a1:8d:62:9d:74:cc:dd:6e:3c:61:46:f8:95:ef:c3:
                    70:b4:e1:55:d5:0c:e2:6e:79:b8:81:70:be:a3:17:
                    2b:fc:0f:a2:0d:7c:aa:01:f7:b8:85:f5:20:7d:c7:
                    7c:c8:60:ad:0d:eb:0f:f3:68:ad:94:9f:7b:8b:3c:
                    3e:39:c9:1f:ac:a3:f7:96:0b:69:8f:82:ea:69:02:
                    da:0c:ef:68:07:7e:53:6e:96:14:31:dd:19:3a:6d:
                    58:c2:2f:d2:5c:07:47:c2:81:df:ca:94:17:b8:6c:
                    16:6c:75:7c:19:27:eb:13:1e:21:19:fa:63:4c:a2:
                    83:64:4e:ec:ab:9a:6c:13:30:32:aa:7b:bb:f2:54:
                    06:d4:7b:df:62:2f:21:ff:c5:1b:9a:bc:76:db:b6:
                    a8:63:4e:3a:45:f4:c1:93:61:fc:03:b8:a5:9b:37:
                    eb:22:ab:59:e5:a3:40:8c:93:64:41:4b:c2:9a:56:
                    d7:fd:24:20:99:1d:1d:35:a1:e9:b8:df:eb:72:06:
                    31:24:46:92:80:9c:a1:b5:2f:f8:8e:12:99:44:7b:
                    14:46:36:24:68:13:02:be:93:af:6b:ca:e3:83:f6:
                    9f:fa:f8:96:f3:b3:e3:db:5c:be:30:3c:05:ca:6d:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:DE:4F:8A:DB:28:F8:47:25:EA:30:D2:86:A6:B5:91:FD:2C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:b8:72:4b:0f:38:6c:db:f1:7a:18:d9:80:ce:47:8d:55:
         be:fa:50:24:69:6b:23:4f:8b:88:24:3a:d7:9a:8d:41:50:44:
         61:84:0a:fd:55:5b:f6:0d:62:b4:d5:d3:a3:4b:70:57:db:c3:
         fe:b0:39:d5:31:0e:3f:a5:d1:8f:a2:12:63:1b:f9:c3:ed:b0:
         9c:08:c6:c2:60:06:eb:65:68:ab:ad:24:97:e7:83:fc:a5:c6:
         d8:fb:ab:cf:58:74:6a:02:ae:b7:ea:81:77:5d:f0:eb:3f:fc:
         d7:ed:96:d5:32:ea:80:1d:13:ac:85:a8:37:b6:49:26:10:ab:
         63:22:a4:fc:f5:b7:54:cc:ed:3f:86:6f:0c:75:f2:d1:7b:1b:
         96:b9:84:db:92:65:0f:bc:23:71:6b:5d:0c:05:6e:01:c2:e5:
         a6:37:ce:96:80:c0:39:17:64:bc:3b:06:04:f7:e7:54:f7:28:
         46:e1:af:7f:d5:9c:93:e9:7b:75:e7:99:a9:b2:46:d2:b8:a7:
         1a:86:b2:23:a9:a3:03:dc:7c:e7:e0:00:0d:86:30:a8:c7:9d:
         30:57:88:ea:2f:7c:bc:93:f8:c1:7e:4e:d1:08:0a:9a:e3:75:
         03:74:f7:a9:c4:2d:24:36:87:af:bd:bb:a8:8b:6a:6d:7d:60:
         55:96:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:44:58 2024 by rpki-client on console-ams.rpki-client.org