Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
File:                     61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa (raw, json)
Hash identifier:          HJNbSQrrJ27DveaOmTZyFWrApimQngtQgl/NOouhfDs=
Subject key identifier:   AC:0D:94:F2:0D:20:A1:94:6C:D0:AF:36:5E:C4:9F:52:0D:7D:CE:14
Certificate issuer:       /CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
Certificate serial:       010D0C9F4328584742BB556FEF14038BF4697480
Authority key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     55082
IP address blocks:        162.252.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:55:6f:ef:14:03:8b:f4:69:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=e24d3e5a-7bc0-47e5-a319-20be578e50e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:0d:1e:10:0f:7b:f8:2c:37:35:b9:9b:61:
                    14:f9:59:85:a9:65:56:a0:d8:e1:b1:a5:ff:0b:fd:
                    56:c3:d3:f1:70:4c:ab:26:08:d1:e5:dc:7f:dd:fc:
                    37:b2:7b:55:56:10:7f:6d:bc:96:1b:2a:61:ed:e2:
                    65:6d:bc:c0:74:10:3d:b6:49:b1:e4:5a:99:a9:a1:
                    97:04:9f:0a:d1:03:f1:85:d6:63:25:2c:33:99:84:
                    f2:c3:3b:a4:2d:80:fa:b4:16:e2:5d:28:4e:a9:33:
                    af:69:66:3f:05:9c:6f:56:5c:55:19:f3:a3:f6:21:
                    f0:7e:88:df:4a:80:a3:42:08:87:13:dd:56:34:85:
                    2e:99:8f:18:e4:48:6d:56:db:92:57:1c:e9:92:62:
                    c0:36:32:bb:79:51:b1:81:a3:89:1e:c9:8a:6c:0b:
                    1a:f6:b6:0d:84:65:29:18:10:38:e1:07:92:18:70:
                    e0:5e:61:4c:62:d8:91:72:7f:8c:26:c8:0d:7d:f2:
                    84:b5:52:e6:7b:51:4a:56:9f:51:a7:57:3c:0e:e2:
                    18:85:44:fc:8f:1b:df:01:38:aa:a1:b8:dc:ae:15:
                    20:9c:ef:ce:f2:01:63:9f:05:9f:8e:70:34:ca:e8:
                    f4:2e:60:1c:47:0d:07:f7:4a:4d:1d:f5:b2:20:51:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:94:F2:0D:20:A1:94:6C:D0:AF:36:5E:C4:9F:52:0D:7D:CE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl

            X509v3 Authority Key Identifier:
                keyid:9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:05:cf:b0:6a:e4:37:a7:fe:9f:ac:c7:9d:93:71:88:5f:72:
         36:0e:93:73:bd:39:17:44:41:c9:1b:16:66:f0:92:75:e0:cf:
         3c:0d:d4:05:1a:03:ab:35:d9:79:3f:0a:7b:dd:49:af:6d:25:
         11:b8:04:f0:0b:2b:f3:18:9a:b7:7c:f9:4d:68:3c:13:ee:ff:
         3c:0c:ef:a5:42:b3:21:55:8f:47:d2:6c:d2:aa:ef:5a:3b:00:
         cd:b5:11:6a:f0:e0:25:28:11:f5:d1:05:7f:86:73:fd:4d:c5:
         eb:43:03:54:fb:36:40:3c:df:83:fd:6a:38:2c:ea:37:a1:f6:
         f4:be:6a:96:4f:b0:e8:68:f5:1c:87:ab:98:50:4b:90:5c:fa:
         9e:3f:4c:9f:01:91:2e:4f:16:64:3c:08:ba:5c:c4:b9:d2:d0:
         45:a3:d3:49:73:61:00:a6:98:82:3d:1f:59:cd:33:80:7e:a2:
         78:02:b1:d4:92:36:81:f5:5f:2b:a0:f2:05:42:d7:7e:57:bf:
         6e:86:3e:a8:cd:75:e6:f9:d3:16:7a:e2:0e:f7:36:6c:25:a0:
         e9:36:3b:4c:43:8e:af:c8:2c:3a:1b:54:af:89:ea:47:92:ea:
         bf:88:b7:7a:e1:97:47:20:59:5a:f8:93:64:1f:4a:a9:2b:7d:
         12:a6:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org