Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa
File:                     3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa (raw, json)
Hash identifier:          svRWVZyCcj2mXgyXSlpuY1IrRr8HXj7F1fFwTcNlW9g=
Subject key identifier:   DA:70:4E:D1:8E:83:27:A8:1F:B1:A9:0A:F6:BF:71:88:62:E4:1A:BF
Certificate issuer:       /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
Certificate serial:       010D0C9F43285847FC7F99441A18CA4E269084C0
Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     20206
IP address blocks:        149.112.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:99:44:1a:18:ca:4e:26:90:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=8bcdc10b-65d9-46d7-982f-d9e9e548e601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:69:15:1b:e7:0e:cf:13:d0:9b:6f:c7:09:
                    2b:dc:0c:3c:91:26:ae:1b:54:fa:f0:4b:d9:a9:a9:
                    41:64:7f:18:e4:f6:db:ab:0d:8d:fa:25:17:60:6c:
                    99:73:1e:b7:e8:cf:86:60:85:06:6c:4f:ea:3d:91:
                    2b:22:8b:c4:4c:db:1a:db:35:ac:a3:f0:a6:c5:d6:
                    b9:82:21:83:d9:e8:0f:af:72:a2:e9:af:3b:ec:9b:
                    3f:a1:ae:c1:93:15:dd:7d:fe:4a:18:96:f0:da:9d:
                    67:4c:10:ff:75:b3:1b:6d:52:f3:91:0a:f9:74:cf:
                    38:33:8e:da:43:f7:6d:d5:92:fd:c3:5c:63:75:88:
                    7e:46:be:8b:85:83:f3:91:7f:a7:dd:56:f5:79:5a:
                    01:78:97:0a:09:10:66:e3:58:b6:54:47:8a:a2:68:
                    12:0a:7d:54:03:fb:f8:96:50:e5:2f:67:a4:dc:80:
                    1d:65:68:0a:69:a5:f8:9e:cc:e7:97:23:f0:95:60:
                    97:25:1f:0f:0e:b4:e4:36:5d:cc:da:75:45:8d:17:
                    e6:ba:ce:34:3b:09:b5:70:ad:ae:dc:aa:bc:4a:7e:
                    ee:fb:8f:8c:a2:31:26:28:97:98:05:95:80:84:65:
                    fd:b4:6b:8a:4c:50:9f:25:1c:df:ab:d7:fc:fc:6a:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:4E:D1:8E:83:27:A8:1F:B1:A9:0A:F6:BF:71:88:62:E4:1A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl

            X509v3 Authority Key Identifier:
                keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:07:0a:47:b2:5a:4c:a4:02:e9:a4:b7:79:8d:58:c6:99:
         c2:88:aa:70:d5:c4:51:a3:68:c6:96:f8:a9:db:76:22:d8:2e:
         94:9a:97:ef:67:3c:cb:48:c1:9a:47:a3:89:20:35:74:4e:4e:
         b1:49:6f:eb:56:90:b1:f6:fd:b9:41:ae:ce:17:de:22:d6:f8:
         72:7b:f4:73:b5:bc:6a:3a:c6:4a:79:a8:95:77:a7:39:9c:da:
         db:18:eb:ff:ed:86:a0:4e:cf:c3:7a:77:44:1e:c2:59:98:fd:
         10:34:54:05:68:6a:07:81:35:a8:8b:a2:61:8f:41:ad:66:4c:
         ee:99:2d:fa:68:26:4a:6f:fa:07:7e:4e:b7:de:02:b9:84:44:
         16:a2:42:ac:04:71:2b:4d:8f:1a:7a:8b:4c:92:fe:e8:08:9b:
         8a:07:04:cb:fe:f4:fe:7a:ce:3e:eb:89:3d:41:97:e2:2b:e2:
         8d:54:32:f4:bd:71:44:bf:ba:4e:93:87:d4:50:ab:14:24:fb:
         98:33:7d:f6:52:7b:d1:69:b5:7b:74:c9:a2:83:3c:78:a2:7b:
         33:45:09:ad:39:d1:88:57:85:3e:88:95:6a:58:43:4f:f8:97:
         d5:99:46:a3:bd:9b:9a:f1:58:b1:72:37:1c:b7:54:31:1d:c8:
         5d:b4:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:57 2024 by rpki-client on console-ams.rpki-client.org