Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa
File:                     20065a80-fc1c-313d-bc55-ba7100fda1b9.roa (raw, json)
Hash identifier:          TkvoamcZbF2wFdVIBb8IE2R5UR/MI+go1oFBhtBs5H8=
Subject key identifier:   97:CE:17:0B:12:C6:AD:62:AD:15:FD:63:ED:EB:85:8C:A5:23:B5:20
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285847213B1222D5998AFA2AFEAF00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     4005
IP address blocks:        204.59.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:12:22:d5:99:8a:fa:2a:fe:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=6cf31163-77b5-49e1-adf7-d30049b8186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:4c:95:d1:5b:cd:55:c3:4b:9a:53:35:92:
                    a2:0b:e6:f2:1e:14:24:37:a9:a6:16:3e:d7:ce:d1:
                    b2:df:05:f0:c6:c0:c5:a3:53:81:ad:8c:d3:3a:8b:
                    24:6e:62:21:25:c2:0a:49:ee:6f:d8:b9:3f:a7:fa:
                    84:6e:af:06:f6:40:72:63:76:14:4b:19:fc:1f:ab:
                    1b:56:69:6e:1c:6f:c0:a9:6a:cc:72:26:ea:8d:d5:
                    0a:33:fa:7c:02:16:7d:40:ac:70:90:32:0c:59:bb:
                    42:67:0b:91:dd:6c:ec:92:6c:3c:95:6a:38:2e:c4:
                    69:bc:0a:6b:3e:9b:fb:52:e7:c5:3d:4e:92:ab:fb:
                    13:bc:d8:86:09:bd:2c:13:92:10:4c:6c:12:f0:ea:
                    1e:ac:41:d3:a0:51:de:c4:a3:b8:df:6a:d0:98:44:
                    5d:34:fe:97:61:7d:70:9b:4c:b9:4d:a8:57:34:a1:
                    b9:07:8b:4d:85:12:a5:06:ab:96:f1:e0:16:b0:60:
                    41:fd:00:1f:98:fb:5e:55:7f:ef:c1:40:78:e7:cd:
                    ed:9e:85:a8:bf:d8:90:a1:58:cd:a7:66:bb:2e:4c:
                    71:a7:ca:de:0f:73:80:e5:9d:85:13:a5:7b:6c:d6:
                    f5:34:46:c6:f6:07:09:f0:e3:05:8e:20:cb:71:82:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:17:0B:12:C6:AD:62:AD:15:FD:63:ED:EB:85:8C:A5:23:B5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.59.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:15:ca:77:f7:23:b4:63:53:c2:a6:8d:d4:99:96:1d:57:ea:
         18:22:bb:91:a6:14:71:07:ad:ae:e3:4c:b6:e1:11:f4:ae:e0:
         9f:d9:a3:0d:cd:41:09:91:05:0c:41:0e:52:3a:9b:b7:29:68:
         c6:fe:85:e0:62:b5:6c:da:00:53:0c:f2:50:cf:d4:f7:57:da:
         2d:10:2f:9f:66:3d:1b:69:ec:b9:85:dc:95:f6:61:d6:c6:af:
         32:94:53:95:95:47:b3:a0:8a:ce:e2:bb:4f:8e:8e:1e:19:c5:
         ed:3d:7d:42:68:06:44:16:84:f7:38:06:21:09:c1:2a:1b:9b:
         19:a8:e4:fb:c8:43:51:0d:21:c2:b9:b9:64:f8:a9:56:33:6c:
         0e:ca:13:0f:50:4f:c5:15:09:d3:67:8d:87:eb:7a:0d:85:a4:
         7f:d8:48:f3:db:09:0b:4a:3f:a2:13:4c:98:71:d0:b6:53:5c:
         3f:43:48:22:77:05:74:00:bc:38:f6:fe:69:00:f2:2d:cd:10:
         ae:0f:0e:b2:99:36:7f:24:8d:8f:b5:80:e2:84:50:39:22:b7:
         f3:83:14:e8:52:96:1d:da:7a:75:7b:74:59:37:91:3a:33:8d:
         a3:68:8c:a3:9c:c4:6e:3b:6c:74:dc:30:d6:d3:cb:4a:81:96:
         4a:c6:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:19 2024 by rpki-client on console-fra.rpki-client.org