Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd71e56e-d62c-381d-8a06-6e3fa0436a4b.roa
File:                     bd71e56e-d62c-381d-8a06-6e3fa0436a4b.roa (raw, json)
Hash identifier:          OAikamwv8QZKtkoKKgFdoRnE3xn5stW4EzYUO43adoA=
Subject key identifier:   06:86:E3:E6:B5:F2:87:62:E3:0F:A5:AE:4C:C1:3A:0D:D8:05:E3:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A66CA5D0DFC220AF9B1AFB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd71e56e-d62c-381d-8a06-6e3fa0436a4b.roa
Signing time:             Thu 24 Oct 2024 18:03:03 +0000
ROA not before:           Thu 24 Oct 2024 18:03:03 +0000
ROA not after:            Wed 22 Jan 2025 19:03:03 +0000
asID:                     401152
IP address blocks:        142.111.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:6c:a5:d0:df:c2:20:af:9b:1a:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 18:03:03 2024 GMT
            Not After : Jan 22 19:03:03 2025 GMT
        Subject: CN=9289a152-1531-4630-b376-d35823fa3cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:80:64:72:b6:c5:86:97:f0:42:f7:7e:17:
                    63:12:1f:e7:f5:b1:83:18:f5:26:96:c6:bb:5d:da:
                    d8:74:59:5e:08:12:bd:42:b8:bd:b1:a3:8e:b3:8e:
                    40:90:c4:b2:9a:37:3b:f3:81:ae:33:2e:53:90:c3:
                    ac:25:64:5f:b8:60:f3:25:8e:ec:42:14:40:19:49:
                    2c:96:1c:6c:3c:19:e5:82:a6:a6:6a:b5:b6:2b:c6:
                    ba:73:1b:43:38:c9:7b:7a:e6:f4:bb:f2:f8:c7:60:
                    64:c0:17:48:df:97:66:78:f3:b3:95:14:91:eb:50:
                    aa:f6:0e:91:51:31:85:ad:26:29:5c:a1:fe:d2:d2:
                    34:70:7a:94:5c:0c:21:e9:bf:14:f8:61:61:0e:d5:
                    aa:cc:1a:ec:e2:34:53:1a:74:48:49:55:47:8f:f3:
                    cb:71:cc:bb:c9:29:07:da:78:37:28:1a:b2:b7:b8:
                    42:23:84:3e:2e:b8:4d:67:8f:49:06:1d:d5:78:35:
                    e6:c5:2f:34:95:11:94:19:31:af:46:a1:ca:2d:3d:
                    39:d2:6f:ae:50:ad:49:7c:92:cf:4e:d7:95:fb:8f:
                    36:95:6d:df:b3:b1:57:3e:c4:52:25:03:f1:e4:1e:
                    fc:1f:d7:19:b8:00:d0:93:3b:81:22:bb:38:1b:8f:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:E3:E6:B5:F2:87:62:E3:0F:A5:AE:4C:C1:3A:0D:D8:05:E3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd71e56e-d62c-381d-8a06-6e3fa0436a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:9d:a2:f7:b3:71:74:16:56:03:76:2b:b1:67:b7:bb:f3:
         3d:92:4d:06:e8:a6:92:ec:54:fa:42:07:3c:6a:9f:89:6f:73:
         b9:df:43:7e:91:6b:86:d2:7b:ae:e1:66:42:b4:2e:e1:9b:98:
         1a:61:71:f4:05:4c:d8:97:26:dc:11:ff:a2:b4:71:95:2e:4d:
         6a:26:aa:ad:41:26:fb:d9:90:22:d9:8f:d8:97:f9:42:82:ca:
         96:5c:ce:78:1a:aa:f4:f8:8e:e6:08:c9:cb:22:64:6e:7b:4f:
         2a:9a:bb:c9:e5:cd:dc:1a:06:1d:9b:a4:82:46:56:ac:b4:ee:
         45:f5:9d:94:1b:43:ba:ac:9c:f0:eb:82:9f:8b:54:40:6f:a6:
         fd:ab:00:39:8d:30:b9:2a:0c:12:54:ca:93:41:e9:23:c5:bf:
         7f:ed:e0:52:da:22:98:80:9b:b1:4f:1c:96:5c:8f:71:d2:37:
         a9:3a:d2:c4:3e:9b:fc:73:ff:3f:87:7f:30:8e:17:15:f1:5f:
         34:bd:2a:dc:be:a4:1b:00:ad:1d:20:50:6a:69:8e:45:0d:ae:
         55:6c:a0:4c:be:54:9e:8f:b2:1a:c3:94:ba:86:ef:9c:0f:38:
         33:54:52:3a:0c:86:43:39:60:1e:5e:ac:31:79:e3:43:b1:52:
         98:17:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:46 2024 by rpki-client on console-fra.rpki-client.org