Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa
File:                     fa861745-00da-3d9c-9262-192bcb50cab0.roa (raw, json)
Hash identifier:          FZPp/mbCPTV75c9A4bsHAZ3mIK9vs4vIE9XGGe+PU4c=
Subject key identifier:   F8:77:85:88:9D:D9:CB:8C:50:FC:C5:17:E3:98:A5:3E:27:04:22:30
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FD2C7A958E7EA9492640
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     4213
IP address blocks:        209.151.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fd:2c:7a:95:8e:7e:a9:49:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=89b7d143-1526-47ce-8d19-0edeaf08db40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6a:ef:cf:6a:79:f0:c9:71:e5:de:48:b9:f9:
                    9f:15:85:41:d2:e5:98:4d:61:c4:48:f6:05:04:a7:
                    04:f0:74:d8:cc:31:fc:c2:d4:3e:2a:96:41:77:36:
                    6b:02:a8:bc:d1:cc:d9:0e:0e:9f:fe:07:c0:1c:57:
                    af:ef:3e:5c:59:81:85:e7:9f:df:5f:02:27:8d:c4:
                    68:ab:60:b7:7e:7e:94:3d:1e:ec:78:89:92:de:1d:
                    e7:5b:94:21:34:e9:19:8e:f2:7c:95:af:5c:2b:b1:
                    4c:86:16:90:4d:02:cc:30:b2:96:7f:da:92:8a:8d:
                    f5:b3:9f:20:c7:56:b3:aa:6c:72:31:04:90:7e:fa:
                    92:9c:a7:31:46:d8:de:6d:ca:63:0e:fc:29:33:f2:
                    3f:bd:52:58:b5:6d:5e:f1:22:60:bc:67:da:05:5e:
                    f3:fe:7a:bc:66:a7:53:a6:1b:e4:d5:86:71:bc:80:
                    a2:cf:e8:3e:4f:d6:ec:dd:73:f8:16:13:6d:0c:39:
                    89:fc:49:f2:82:0a:d0:b2:e9:dc:f6:03:89:7e:73:
                    90:f8:7e:0f:31:6d:f7:3d:d3:f6:34:24:92:bc:7e:
                    28:74:aa:b9:5a:d0:6f:db:26:2d:70:c5:07:22:cc:
                    9f:1d:d3:4d:f7:1b:ad:44:e3:92:92:0d:87:5f:f3:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:85:88:9D:D9:CB:8C:50:FC:C5:17:E3:98:A5:3E:27:04:22:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:19:65:17:dc:d9:cb:ba:f2:d9:19:11:ad:f8:60:7c:e5:
         8f:b2:94:6d:df:93:58:33:c5:04:d0:4b:e6:c0:2a:ff:c4:a2:
         2c:f0:3d:69:d5:33:7b:5a:ac:d9:58:d3:d7:ff:fe:a1:5d:f3:
         52:06:ac:b1:a7:67:75:34:b0:3b:8a:60:7b:f1:50:67:55:1f:
         02:69:60:bc:8f:b7:e2:86:24:bc:80:c3:7b:e5:05:ca:5c:1f:
         12:67:56:be:75:54:89:9f:20:2f:f3:f7:41:8b:72:56:f3:22:
         28:79:07:05:fd:2b:6c:d7:58:72:18:65:ff:bb:53:47:71:11:
         16:6f:3b:ad:7a:8e:bf:c7:97:71:70:57:ac:0e:44:09:73:a0:
         ef:da:74:1b:f3:0d:d9:06:48:cf:c2:d7:bb:dd:ba:a6:be:60:
         70:05:08:31:35:7c:ec:ff:fd:43:2a:4d:f9:80:24:6c:fa:6d:
         f8:87:a8:91:18:66:ea:34:cc:24:2b:09:f6:c9:64:eb:dd:54:
         ff:97:3f:7a:b5:32:dd:1c:c5:49:67:1f:23:83:5b:8f:09:c1:
         97:43:61:94:08:0e:34:b5:cf:27:a6:2a:37:60:b5:4a:8c:33:
         95:29:20:61:93:94:1a:99:74:1b:88:b8:9e:da:e7:8d:55:c4:
         5c:7d:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:15:12 2024 by rpki-client on console-fra.rpki-client.org