Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
File:                     8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa (raw, json)
Hash identifier:          EUDEoU3pS4Qx4OhnVg4qMPQqPv8prcgKRoyRKC0L890=
Subject key identifier:   4C:9C:31:C6:72:00:62:C3:72:0B:2F:D2:58:C5:CA:B0:CD:9B:6C:ED
Certificate issuer:       /CN=e22f9709-dbc2-4fbd-a776-befd371f460a
Certificate serial:       010D0C9F43285847D29F5AAC754D85045A6E2240
Authority key identifier: 0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     32728
IP address blocks:        205.132.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:5a:ac:75:4d:85:04:5a:6e:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22f9709-dbc2-4fbd-a776-befd371f460a
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=a8914a5f-43bd-4c31-b10e-064703c1a496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:8c:b8:a4:d6:d4:47:92:c5:6d:fe:d0:59:
                    0e:bc:af:99:b7:a8:08:79:19:d2:36:18:d4:3b:15:
                    b0:54:70:9c:51:d7:eb:46:8c:f0:0e:08:aa:40:be:
                    b8:d3:5f:0a:7b:2f:fe:d8:a0:82:78:4d:7d:34:36:
                    7c:00:ed:fd:54:5a:fd:73:5b:82:ad:c7:dc:ec:f8:
                    30:6c:6c:de:ee:9b:9d:4d:e2:96:9b:a7:86:9b:f0:
                    99:cd:d2:cd:86:cf:ba:04:fc:1f:52:10:d1:2a:54:
                    9e:04:a0:13:ab:1b:ef:78:95:97:5c:6f:49:0c:c3:
                    8a:dc:88:7d:d2:84:35:cb:59:49:80:aa:c5:cc:df:
                    b3:98:9b:83:58:1f:c8:4f:9c:9a:1e:63:0d:59:c1:
                    82:21:e1:aa:51:00:12:bf:02:ad:ef:94:0b:96:68:
                    1c:da:18:09:7c:09:47:00:82:c7:01:22:dc:7f:ae:
                    67:87:8d:62:40:47:19:e4:c7:46:af:8c:d0:ee:b7:
                    51:bf:78:2c:b8:af:69:74:43:db:9f:59:34:03:58:
                    75:0e:be:a4:0b:36:02:f7:d3:8a:05:89:5b:8e:b5:
                    b3:8e:f7:f7:f8:15:8b:92:ea:e5:91:03:51:7a:fc:
                    2b:bb:a3:1f:64:31:82:18:89:7e:bb:a8:87:c0:fd:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9C:31:C6:72:00:62:C3:72:0B:2F:D2:58:C5:CA:B0:CD:9B:6C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:a3:52:09:cb:a8:a7:29:31:2d:08:e4:1f:db:aa:a5:81:
         09:74:20:2a:50:06:47:30:d2:d2:0a:f9:60:8d:35:d4:f2:e4:
         15:79:9d:ab:ab:06:24:d2:2b:e5:ce:42:28:d3:41:5a:19:0b:
         8f:91:e1:80:81:15:3f:54:e9:e8:e8:28:ce:86:63:06:ab:e7:
         d9:7c:89:b2:75:a5:8d:19:c7:c7:8f:7e:da:09:fe:68:02:35:
         d0:0f:89:61:ce:4b:b0:5b:0f:cc:ce:fb:07:ff:f8:aa:1b:70:
         46:94:46:51:fa:02:1b:92:f5:0b:4e:e4:fe:56:e8:c5:82:95:
         eb:ab:c2:f4:91:cd:83:05:bb:34:81:4a:f9:83:ec:2f:5c:88:
         8e:6c:96:ed:9c:91:72:7c:cc:70:c2:c1:e7:75:21:ab:5b:05:
         18:6f:11:c6:00:cb:19:f1:7c:92:11:d8:62:73:81:3d:05:d0:
         d5:e4:ad:4e:55:86:a8:88:ae:ab:8b:a5:a7:bf:7a:77:91:1b:
         d7:4b:70:52:95:e1:11:08:6e:00:d9:c6:ae:7f:2f:be:8b:ae:
         76:51:c5:83:54:fe:f8:01:8f:90:10:71:e0:a4:25:80:40:bc:
         54:98:54:a2:eb:dd:7a:e7:fb:a7:92:e3:d0:83:f9:4f:9c:a5:
         6d:d5:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:15 2024 by rpki-client on console-fra.rpki-client.org