Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/9c737e72-d1f1-3211-9310-8ce0a0d6d6f9.roa
File:                     9c737e72-d1f1-3211-9310-8ce0a0d6d6f9.roa (raw, json)
Hash identifier:          w4I+HoVX3iXfoRhd+F+9MPzHEz2cvq4rR6hCX9is39w=
Subject key identifier:   C2:17:DE:3D:01:1E:C9:DC:E9:AA:AB:5A:57:AA:CB:51:D5:70:35:68
Certificate issuer:       /CN=f97ba947-3a13-4edd-9188-5bbc74f15b42
Certificate serial:       010D0C9F4328584768B1AA0A3ADDB8CC8DF8E500
Authority key identifier: A1:AF:32:9D:D0:0A:05:71:5B:36:4B:78:58:0B:09:4E:EC:04:A8:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/9c737e72-d1f1-3211-9310-8ce0a0d6d6f9.roa
Signing time:             Wed 02 Oct 2024 15:21:59 +0000
ROA not before:           Wed 02 Oct 2024 15:21:59 +0000
ROA not after:            Tue 31 Dec 2024 16:21:59 +0000
asID:                     401364
IP address blocks:        209.178.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/f97ba947-3a13-4edd-9188-5bbc74f15b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/f97ba947-3a13-4edd-9188-5bbc74f15b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:b1:aa:0a:3a:dd:b8:cc:8d:f8:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97ba947-3a13-4edd-9188-5bbc74f15b42
        Validity
            Not Before: Oct  2 15:21:59 2024 GMT
            Not After : Dec 31 16:21:59 2024 GMT
        Subject: CN=117ae92c-fdc3-4dbd-81ec-79af743c2b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:fc:70:c9:a5:06:bd:f6:8b:47:15:c0:ae:
                    ad:6e:35:08:a8:bc:58:aa:79:42:73:4f:ea:da:e4:
                    16:f3:2e:59:ec:e0:f2:d6:e7:ac:99:40:42:ef:bb:
                    65:09:89:5b:21:14:43:ce:7f:89:de:ee:38:0e:cb:
                    6d:b5:26:fb:12:f0:70:69:09:1e:b0:f8:33:7a:c7:
                    f5:af:af:6f:d7:21:b7:59:5b:0a:1f:06:36:89:bb:
                    fe:06:93:41:c5:27:6a:c9:52:9b:69:40:2e:e6:ca:
                    57:45:4b:2b:8d:98:fe:a6:71:85:05:37:22:02:ae:
                    c8:b4:5d:ba:26:e4:12:e8:18:e8:ef:c1:71:3a:06:
                    87:29:6c:78:46:3e:55:f4:e3:ca:f8:1c:d2:be:fa:
                    08:10:16:0b:61:c0:e8:ec:76:74:29:9c:3e:a9:9c:
                    15:fe:35:5c:b2:f2:63:8e:b0:6a:3e:34:4c:d5:34:
                    e2:aa:da:db:b0:7a:9b:56:7f:a2:09:11:e7:af:4c:
                    3b:b9:ff:12:2c:97:3d:3e:18:85:3d:f1:a2:22:4c:
                    f7:ba:d5:6e:ee:ef:f1:f3:3b:a0:dc:f6:ef:5c:87:
                    7c:98:9b:07:27:c8:be:8a:12:ad:a4:e1:65:66:be:
                    bd:b9:d8:d0:72:6d:68:a6:5b:8a:30:52:b3:38:b8:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:DE:3D:01:1E:C9:DC:E9:AA:AB:5A:57:AA:CB:51:D5:70:35:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/9c737e72-d1f1-3211-9310-8ce0a0d6d6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/f97ba947-3a13-4edd-9188-5bbc74f15b42.crl

            X509v3 Authority Key Identifier:
                keyid:A1:AF:32:9D:D0:0A:05:71:5B:36:4B:78:58:0B:09:4E:EC:04:A8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:d6:66:07:8a:02:34:e9:2c:1f:c7:72:e2:5d:0c:69:a0:
         39:67:be:0d:3c:12:08:03:95:b5:b8:b0:dc:b2:cc:f1:c6:2f:
         56:2c:c9:e1:6c:b1:9f:5f:ae:c2:62:20:4d:a6:b3:59:7d:60:
         86:6b:76:e1:31:f2:87:b1:2c:7d:1d:01:03:e0:cc:84:3f:b0:
         1d:07:d8:73:c0:0d:1e:41:40:18:5c:d2:b6:ec:50:fa:b8:37:
         2f:15:33:7d:1f:5a:a9:ae:cc:16:60:51:7f:ee:5a:4a:16:04:
         86:84:cc:54:cd:f7:5e:f6:81:3a:65:05:68:73:25:7e:37:b9:
         3c:54:be:04:7e:96:9d:e2:8a:61:86:b2:5d:86:59:db:d6:dc:
         96:fd:7b:57:77:69:cb:2e:0a:a0:9d:d6:88:6c:2b:f8:f0:90:
         1f:73:91:a2:71:b2:92:6e:d2:88:1b:ce:40:b0:31:dd:b4:d5:
         7f:f4:99:c7:a9:6c:4e:7d:75:d5:24:c4:0f:fd:fa:e1:86:09:
         70:ef:4b:93:0f:42:99:40:3f:70:c0:9c:84:0b:eb:3e:9a:af:
         b2:60:43:6a:70:d9:7f:44:b9:c6:80:0c:be:3f:e6:50:82:0d:
         8f:20:4c:a5:50:18:fd:ae:c7:75:db:55:57:d5:fa:f0:2a:85:
         23:80:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:42 2024 by rpki-client on console-ams.rpki-client.org