Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d11e989b-4c3c-3ec5-8b7d-5b28093abf44.roa
File:                     d11e989b-4c3c-3ec5-8b7d-5b28093abf44.roa (raw, json)
Hash identifier:          Dqj5X/LxDtwFcwFXDKIJR5tXNQgTndaLxctl8Y1++Pc=
Subject key identifier:   49:45:DB:E7:BF:08:60:E2:BD:4B:D1:3C:A6:40:8C:9E:B8:FC:B6:90
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285847E453321399294BEEDF7F1480
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d11e989b-4c3c-3ec5-8b7d-5b28093abf44.roa
Signing time:             Fri 15 Nov 2024 22:11:53 +0000
ROA not before:           Fri 15 Nov 2024 22:11:53 +0000
ROA not after:            Thu 13 Feb 2025 22:11:53 +0000
asID:                     5769
IP address blocks:        205.151.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:53:32:13:99:29:4b:ee:df:7f:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Nov 15 22:11:53 2024 GMT
            Not After : Feb 13 22:11:53 2025 GMT
        Subject: CN=162417c3-334d-4d1a-b35d-57ad686aabd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:7b:79:30:80:15:2d:21:79:68:5e:0d:52:
                    a4:47:12:44:24:8f:ee:01:8e:c0:17:c6:99:ee:c6:
                    09:53:03:58:c2:69:79:5b:9a:07:09:56:e4:e9:d2:
                    a0:8b:dc:f2:ff:a3:a3:37:1c:d4:a2:0f:4f:44:ea:
                    e3:61:a4:6f:3b:23:25:25:1f:4a:77:81:c3:7a:6a:
                    38:4b:7c:c4:d0:ab:b4:08:73:88:52:fa:21:57:08:
                    ac:89:be:c9:dc:70:54:00:b6:8a:5a:7a:15:4b:79:
                    29:7f:45:cf:dc:fc:0e:9d:ae:af:b3:d5:4a:c4:de:
                    2e:ed:58:9a:9a:46:87:dd:ae:a7:5a:02:ac:40:f4:
                    30:6a:0a:48:5e:79:3a:81:2f:49:89:ee:6a:49:87:
                    e4:f8:71:f5:d3:05:73:a3:b6:d8:a7:9d:c5:e2:2a:
                    09:1e:cd:74:1e:ca:0e:07:d6:e0:fe:f7:10:ea:0f:
                    90:67:d1:d8:07:80:4d:04:ae:b5:20:53:98:3a:82:
                    f2:cb:0c:48:ae:3f:a5:a5:50:4a:f7:7d:0b:14:76:
                    9c:9a:58:da:41:cd:01:6a:9f:9c:a7:2f:d4:6e:f2:
                    c6:89:e1:6f:21:d0:bb:a7:7b:43:57:8e:57:3b:e7:
                    ef:da:97:76:88:b4:50:9d:b9:39:9a:be:0f:60:fc:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:45:DB:E7:BF:08:60:E2:BD:4B:D1:3C:A6:40:8C:9E:B8:FC:B6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d11e989b-4c3c-3ec5-8b7d-5b28093abf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:4b:18:20:c7:65:d7:a8:1d:6f:9f:e9:7f:e2:fa:1f:1b:
         a1:85:86:58:4b:1c:ec:b8:eb:5f:ef:36:89:5a:5b:04:3f:87:
         7a:2c:73:a2:cc:23:b8:28:74:62:f0:68:e9:bf:d6:68:43:10:
         5a:bb:f5:af:70:37:79:95:9b:f3:bd:f2:06:14:af:c8:0c:c2:
         c2:b1:10:3e:f0:b0:f0:a6:74:42:5f:8e:4d:7e:60:12:62:1d:
         7b:c0:c5:aa:29:b0:19:f5:70:a6:73:2c:40:48:09:c0:a7:c7:
         7a:d9:3b:0b:81:72:b6:7e:46:82:59:13:15:a3:6f:c2:86:1f:
         60:26:87:a5:d1:a1:dc:4b:47:73:25:03:dc:ea:e7:b2:9c:a8:
         24:ab:7b:90:c3:ff:e1:d4:2f:85:7e:b0:a1:49:73:5c:35:d3:
         28:7b:aa:fb:0f:3d:a0:ca:85:0d:4e:06:59:19:c8:42:11:3d:
         49:1f:c1:8f:c2:a7:9c:d7:4a:7d:d5:c9:85:27:39:5f:f9:c6:
         7b:9b:b0:2a:38:cf:3e:b9:ac:ca:4c:86:1c:0f:69:10:28:b6:
         2b:49:9f:24:64:35:41:d9:83:f0:61:47:fc:8f:17:09:6a:a3:
         ff:71:23:01:32:a8:04:11:13:d5:9d:aa:3b:df:a3:c0:6f:00:
         4f:5a:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:04 2024 by rpki-client on console-fra.rpki-client.org