Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File:                     9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier:          haJTFE1jtrf94qEqvI/rXmKJslYtHcG9s2E1neoIlX4=
Subject key identifier:   BC:DD:4B:7D:C0:2D:41:32:53:23:FB:51:66:AD:6D:14:7E:19:65:23
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F43285845AF5371AA55F588C4B4223B80
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     36289
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:71:aa:55:f5:88:c4:b4:22:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=02cd4bc2-788f-44aa-99b2-9188f4aa2f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:f4:0a:64:ce:8e:77:68:56:2a:ee:3a:70:
                    05:5f:3b:c2:b6:9c:63:8a:bb:cf:d8:51:ab:07:5c:
                    a4:e7:ae:52:06:b3:23:77:f2:e2:b3:0f:31:39:51:
                    ef:e2:db:0c:7e:c1:e0:e3:cc:53:23:0b:93:00:c2:
                    8c:c5:ef:25:e4:e0:7b:52:5e:90:5a:41:c0:2f:c8:
                    a1:6b:a8:dc:c5:58:0e:97:3c:2d:31:e3:38:f7:4f:
                    cf:5b:8e:3f:b5:c8:7a:08:00:2f:a7:33:1b:82:ec:
                    24:ba:25:74:84:e5:ee:58:12:dc:35:8c:64:af:95:
                    c6:a2:fc:db:ad:86:78:49:b7:c1:11:9b:23:01:d7:
                    53:ce:98:8a:02:ee:fb:3f:4d:d1:3c:4c:e9:24:d9:
                    52:4e:e8:50:23:f2:d9:d2:93:79:56:65:c2:f2:f1:
                    11:f9:8b:ec:07:18:9d:07:51:ac:27:f5:de:e5:e0:
                    74:39:ba:88:0c:7a:7a:92:b3:4f:8f:0b:22:93:f1:
                    af:77:3b:d6:04:99:79:3f:47:94:19:98:55:b4:4b:
                    d0:e6:d9:02:6e:07:4e:37:fa:f8:ff:e8:4a:0d:49:
                    47:aa:a4:04:44:84:8d:92:1e:5c:b5:5b:5c:3f:83:
                    ad:9f:bd:4f:26:f7:50:94:0f:ee:7c:88:eb:0b:3d:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:4B:7D:C0:2D:41:32:53:23:FB:51:66:AD:6D:14:7E:19:65:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:79:26:42:45:e5:e1:8b:18:89:85:f7:36:a0:5f:56:be:
         c5:dd:04:aa:75:88:1d:3c:82:e5:69:84:0a:c8:22:be:b7:ba:
         58:9f:0f:86:57:36:56:2f:3e:ec:ed:ec:52:ef:1f:1f:84:3c:
         92:a0:0d:aa:82:59:92:86:3f:f3:00:68:ca:a9:45:b3:57:0d:
         0c:11:39:d3:7e:e4:47:d7:25:01:ee:18:f5:b3:ce:c5:92:ed:
         c6:2d:43:60:99:52:8f:ff:7f:72:24:49:ad:75:67:f5:49:71:
         74:6c:8b:17:f3:13:4d:eb:2f:2b:77:a9:8e:73:d7:d0:8b:93:
         1a:51:aa:b2:99:20:96:71:a3:e4:6f:1b:02:c1:9b:c3:93:ad:
         41:69:55:57:3c:15:3c:86:42:4d:0b:cf:b2:d4:eb:7f:71:0e:
         63:25:94:db:d3:1d:37:4c:f4:97:cc:58:cc:43:fe:4f:95:b0:
         9d:3b:d5:94:2c:51:ab:d4:f0:68:cd:8f:36:02:cf:54:34:eb:
         b4:4e:fd:ba:c4:08:c2:58:eb:f0:54:11:3a:e9:97:31:74:b3:
         e4:f3:8f:1c:37:c3:71:87:3a:db:25:57:73:27:e5:f6:94:7c:
         2f:2f:30:9d:27:4e:90:90:50:f9:42:8c:aa:33:3e:59:72:b3:
         f2:e6:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:48 2024 by rpki-client on console-fra.rpki-client.org