Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/7fc8c07b-c723-3b03-9bcc-b271d26e21e4.roa
File:                     7fc8c07b-c723-3b03-9bcc-b271d26e21e4.roa (raw, json)
Hash identifier:          x2Ss98EVOnBJLb9bSkUG7OheVSSeTZ9TVTjxxm0h0ME=
Subject key identifier:   7A:37:5B:06:6E:95:1A:44:F2:DA:3A:C2:FA:7A:A9:E8:D8:5D:34:2A
Certificate issuer:       /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
Certificate serial:       010D0C9F43285847C8D9E80A1B4A3C1980A9F600
Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/7fc8c07b-c723-3b03-9bcc-b271d26e21e4.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     394195
IP address blocks:        205.220.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e8:0a:1b:4a:3c:19:80:a9:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=3531eca9-43ba-46f6-b22a-91f78c2fa42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:b3:69:71:6a:31:f1:52:7b:19:c4:4c:38:
                    69:ac:e4:5d:79:74:cc:82:5b:80:92:13:f3:d7:49:
                    50:ef:55:6a:27:75:12:19:f8:4e:a3:06:6a:02:3e:
                    04:98:7d:c1:d5:96:be:5e:4d:9a:6f:34:a3:5f:9e:
                    25:be:12:59:e9:31:7d:b2:5e:6d:a5:04:ca:72:92:
                    8d:b1:c5:10:28:34:c3:ca:ef:d7:b4:69:b7:ae:f3:
                    0d:4d:fc:f0:1d:8b:6f:91:fc:c6:f0:f0:89:d6:45:
                    a6:6d:be:96:dc:17:7b:24:ec:08:7e:01:62:13:43:
                    88:3e:0f:97:a3:c8:96:1f:4b:57:5f:7f:bc:b4:75:
                    38:5f:78:2e:95:c6:ee:93:46:ec:ff:66:14:89:d3:
                    3c:90:56:33:8a:98:c0:4b:dd:6b:4a:5d:a0:9b:ef:
                    91:58:45:47:17:0f:24:8e:4e:57:98:b6:f2:f8:7e:
                    66:3c:9f:19:fe:8c:ac:d6:c8:c5:18:ce:4e:9c:19:
                    3e:9a:9f:bd:85:84:5e:2a:8c:36:b1:b5:f2:54:2b:
                    05:2e:7f:a7:f5:87:c2:a7:c4:e3:b3:7e:50:20:c0:
                    83:62:19:c3:87:05:8a:0f:e5:64:51:38:d3:40:fe:
                    b8:40:22:d1:aa:46:47:94:45:6e:10:af:ec:61:67:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:5B:06:6E:95:1A:44:F2:DA:3A:C2:FA:7A:A9:E8:D8:5D:34:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/7fc8c07b-c723-3b03-9bcc-b271d26e21e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:ec:b0:b6:9a:9a:f5:7a:e8:79:04:1f:28:dc:4d:8f:67:
         52:bb:a1:5e:d2:3d:af:11:61:ec:d4:9f:3e:91:93:87:5d:85:
         2a:2e:c7:f0:c5:45:0f:ef:76:00:53:dd:a0:1f:05:5b:96:ee:
         c5:62:40:69:e3:80:36:e4:eb:58:40:17:84:aa:4c:11:4f:86:
         2f:8d:06:02:58:ef:10:4b:f8:af:46:23:6e:11:15:b7:86:0f:
         97:7b:3b:05:4f:07:ac:49:cb:95:ad:f9:02:62:cb:11:12:fd:
         e1:2f:6c:e0:07:61:24:f2:aa:e8:aa:08:3e:7d:7c:26:4e:99:
         e7:89:91:89:0f:34:9a:1c:42:b7:ef:2f:da:18:83:02:b3:41:
         0e:73:00:f9:37:98:c4:65:03:d5:61:10:cd:93:5d:9e:06:e2:
         e1:43:5e:a9:30:08:a7:fc:80:69:8d:12:66:3a:85:c9:dc:cc:
         82:19:2a:ea:c9:b5:e4:fa:d1:21:3b:6e:60:57:d6:88:50:90:
         ec:09:12:ba:b9:d0:53:e6:5e:1d:fb:ba:ca:a2:6e:08:e9:7f:
         73:a8:57:c4:e8:4e:9d:13:77:06:be:43:a5:59:78:88:5a:45:
         61:14:db:d9:13:79:8b:76:fe:49:f9:cc:46:5a:62:b3:bd:e1:
         8b:a6:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org