Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa
File:                     1c213eca-2928-3702-abc1-b5482041c1b4.roa (raw, json)
Hash identifier:          Aw4P9/IBIkTjO+VbLRnL53/TuFXfllqqKyLvVf2R/MA=
Subject key identifier:   39:26:11:CF:85:E8:44:B1:9D:F5:72:C3:35:1D:0F:D1:06:64:11:E1
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285847213B1B45FF7E4DFA4F498E00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     4005
IP address blocks:        204.59.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1b:45:ff:7e:4d:fa:4f:49:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=de8994f6-483a-4b04-b055-cdcfd97119dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:b2:44:02:51:4c:9a:91:dc:85:5a:d1:f9:
                    44:f0:85:b7:dd:38:74:46:dc:b5:69:72:47:68:2b:
                    7c:54:31:25:9f:3f:33:90:7d:49:d9:3f:a7:27:5f:
                    77:c3:1c:0b:40:da:c2:ce:99:da:a4:6b:2c:12:9b:
                    b0:87:dd:d7:ea:2a:82:d3:73:c8:3c:1f:f3:95:b9:
                    b4:60:a4:c9:ff:59:40:8c:de:12:81:f8:20:b5:48:
                    e3:83:14:97:2c:7f:f3:29:e2:95:18:80:64:4b:a0:
                    01:a4:76:bc:d0:eb:bb:c6:06:a5:1e:90:47:6f:0c:
                    d9:03:aa:15:d1:36:8a:75:7b:36:e1:c9:8f:e3:56:
                    9e:c3:a5:7f:96:34:5e:f1:e0:6a:3e:4c:8b:d6:ef:
                    81:cb:19:1a:30:9b:32:03:9a:b0:04:c4:ff:4d:d9:
                    eb:64:90:08:d0:b1:ec:44:f2:de:a9:7a:7a:35:41:
                    8c:99:b9:70:85:ee:55:06:bb:44:c9:63:ab:62:eb:
                    94:e2:df:d2:80:2e:bd:0a:c7:67:fa:e8:a0:37:d8:
                    56:2c:1d:2b:75:e4:c5:03:ae:b4:29:91:a9:89:ac:
                    b7:19:bd:34:bc:24:16:6e:aa:31:f6:ec:6c:cc:b8:
                    f1:fe:60:24:3a:6d:02:4b:15:71:ed:a0:32:99:3d:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:11:CF:85:E8:44:B1:9D:F5:72:C3:35:1D:0F:D1:06:64:11:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.59.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:92:f3:fb:f8:56:29:8a:8d:1e:27:ee:e1:bf:a8:ed:d2:85:
         bc:8a:36:31:33:76:a5:00:5b:5b:06:c9:64:d6:6c:f8:6d:2e:
         39:0d:77:10:5c:57:e9:09:83:f6:5c:b1:82:4e:51:91:91:7c:
         b7:a1:89:c7:c1:69:b2:83:43:58:b6:a1:d7:48:6f:d7:9e:5f:
         0f:15:c0:16:76:3e:0e:2a:0b:cf:71:6f:4f:1a:b2:20:a0:34:
         5b:e8:58:db:26:3d:b6:8c:0e:fd:78:db:ba:af:5e:4c:45:c7:
         be:38:da:97:12:ba:c0:05:5a:cb:9a:74:6a:fb:7c:40:71:e1:
         ae:ad:e5:5c:e9:11:e8:3b:19:33:bc:ee:e4:0f:4a:d1:18:32:
         36:46:c2:d1:64:b7:bc:ec:15:7f:dd:59:f6:c0:06:06:7d:3a:
         4b:08:f9:91:68:34:a8:be:26:9b:92:63:99:a5:d4:14:5e:04:
         31:b4:bf:af:0e:c3:95:4b:20:16:a7:2e:c4:82:08:06:cd:ca:
         23:55:6e:86:3b:21:db:0d:7f:fa:31:be:eb:3a:3e:28:fe:fa:
         67:a2:4d:39:64:83:fe:27:39:36:27:f5:37:27:d5:ad:6c:1b:
         ac:3c:4b:d5:ad:85:e8:62:f4:0b:5f:fb:02:74:de:47:fb:13:
         44:d2:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:24 2024 by rpki-client on console-fra.rpki-client.org