Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/4c61d4ec-1e0e-37bd-a4b3-0feb6f49c272.roa
File:                     4c61d4ec-1e0e-37bd-a4b3-0feb6f49c272.roa (raw, json)
Hash identifier:          ew77n/zL2pfR/qLA08kZy9GSHXWSYqYDwDsIyV2Yd9g=
Subject key identifier:   DB:5E:7C:B4:68:DA:12:EE:F3:D7:62:69:39:B8:66:CA:5E:B2:02:B2
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F4328584726D08ED273634F4F571DE440
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/4c61d4ec-1e0e-37bd-a4b3-0feb6f49c272.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        205.233.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8e:d2:73:63:4f:4f:57:1d:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=9e1968d5-0899-4b91-bdb7-b86fc7c13b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:6b:58:63:0b:30:9e:8d:43:86:34:9b:3a:
                    5f:ab:9d:a3:9c:00:1d:3f:02:2f:fe:50:da:06:ee:
                    fa:9e:e3:70:ff:3f:56:7e:41:32:6f:d6:9e:17:1d:
                    73:1e:87:ce:25:af:61:cf:fc:e5:ae:92:6f:e3:47:
                    9a:1d:3a:12:f8:cf:56:c4:51:b9:72:07:d8:48:30:
                    69:e3:16:07:b5:ec:cd:21:5f:32:09:a9:34:55:f9:
                    62:bd:0d:08:e5:85:51:ef:1a:b6:0d:66:ec:15:ad:
                    82:6f:73:25:1d:d6:c0:39:4c:21:c6:9b:8b:8f:f5:
                    b6:91:70:4e:c5:e2:7e:5f:8b:54:a0:cf:d7:c4:72:
                    63:a2:11:bb:51:b3:b4:21:f0:47:9e:a0:44:f8:90:
                    8c:d7:59:cd:57:52:68:3b:6a:4a:b2:ff:54:e0:a1:
                    1f:b4:3e:92:29:e4:93:eb:a2:23:07:91:22:4c:58:
                    e5:de:e2:30:27:cf:cc:28:19:4b:5c:80:b7:66:fa:
                    57:27:25:65:56:db:c4:cb:96:38:a0:f6:7e:6f:d2:
                    19:85:cc:c6:86:de:79:c8:0a:05:40:08:f0:d9:e1:
                    ef:73:8b:6f:45:7e:90:14:d2:4a:4b:39:c9:f9:10:
                    a5:e4:1f:d1:0a:bf:92:42:a1:f8:2c:20:d8:25:b9:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5E:7C:B4:68:DA:12:EE:F3:D7:62:69:39:B8:66:CA:5E:B2:02:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/4c61d4ec-1e0e-37bd-a4b3-0feb6f49c272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:30:3e:54:b9:44:9d:17:f4:fc:fe:45:a5:29:ef:e6:bb:9d:
         3c:6f:c7:25:41:19:dc:16:6c:e0:5b:f8:68:54:61:9b:30:b3:
         34:b7:a0:47:bd:f4:b0:44:0f:77:c5:e5:8e:98:28:ad:15:e7:
         fc:28:57:f3:d9:73:97:65:20:f0:86:08:28:f0:71:a2:54:d9:
         b6:07:4a:2b:c9:5a:be:e3:07:8b:88:1c:7d:d8:ae:6f:04:8e:
         4d:cb:27:05:c0:bf:dc:88:0d:b4:f8:f4:5f:01:42:40:59:1d:
         65:57:98:0b:b0:29:b6:a1:d4:59:ac:f0:15:d2:4b:e2:ca:58:
         6d:b8:a5:c7:c3:b6:f5:74:82:6f:85:d6:89:1e:33:07:23:dd:
         d2:68:f8:98:8f:c9:c6:7a:69:8c:44:d9:ea:de:1e:d6:45:ea:
         ed:51:b0:c7:0d:e6:2a:7f:69:75:8d:d7:e6:0c:0c:f9:7c:2c:
         7d:3b:c2:de:13:a7:85:36:99:ff:9d:4d:28:eb:4a:11:2f:56:
         f3:66:7b:1d:d3:ec:26:9f:86:b3:5e:63:fc:e4:b1:dc:85:39:
         24:67:71:66:41:35:37:48:c8:f3:4f:73:ad:b5:31:6d:4c:64:
         98:bd:8b:20:7b:9a:02:f6:64:f0:21:c6:8e:d9:29:d8:5e:bb:
         e6:dc:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:49 2024 by rpki-client on console-fra.rpki-client.org