Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
File:                     a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json)
Hash identifier:          UqCeY73suRd9ILu04RCtULo+e4NV64l0YUXb2VGfsDI=
Subject key identifier:   A1:E9:AC:D7:2E:27:A5:BF:B4:BF:D5:75:CB:A2:FC:FA:69:5F:66:3A
Certificate issuer:       /CN=83978879-0e89-498f-901b-884a1988c27f
Certificate serial:       010D0C9F4328584762D65356165A4C11255DFFC0
Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     21615
IP address blocks:        209.33.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:53:56:16:5a:4c:11:25:5d:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83978879-0e89-498f-901b-884a1988c27f
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=4ee245d9-f844-42a4-86d5-fa39a8655491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8e:14:e4:e4:c1:b2:ad:64:58:a8:4b:ca:cf:
                    2f:f5:16:60:70:f8:bb:dd:73:36:45:df:36:7e:a0:
                    ce:c4:50:19:08:1c:7e:39:93:15:9c:15:2f:76:86:
                    d3:8c:be:f9:42:32:14:05:ae:a2:9f:a3:77:8d:d4:
                    89:78:e7:27:b1:14:f3:e3:f4:51:b3:6c:fb:4d:b4:
                    c1:0e:8a:35:aa:47:5d:8a:61:8d:58:ba:83:cb:7b:
                    98:bf:f6:f4:b4:60:b8:01:93:e6:1f:11:59:9f:ad:
                    df:78:95:fc:fe:61:3d:64:61:15:22:25:64:5e:71:
                    5a:83:f9:3c:29:76:7e:00:20:56:3f:a3:21:1b:aa:
                    d7:23:13:e6:e1:0c:3f:26:2f:6d:3c:a4:bc:8b:f2:
                    1f:b9:88:69:07:74:54:69:1c:0f:9e:1c:99:89:b7:
                    70:ac:eb:bd:7e:43:9b:81:98:e6:06:9b:ad:34:65:
                    de:71:2f:ce:61:aa:4c:1a:f4:c2:87:d4:2b:dd:26:
                    1c:32:b9:b7:69:50:80:95:7a:aa:ae:f1:f9:29:38:
                    ea:d1:dd:c2:3f:e1:1c:ad:47:bd:f7:a7:a7:55:00:
                    da:56:46:90:73:b8:42:5a:e3:9c:20:66:2f:d7:48:
                    9d:9a:82:60:84:b4:b4:ff:c3:6d:66:57:76:de:17:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:AC:D7:2E:27:A5:BF:B4:BF:D5:75:CB:A2:FC:FA:69:5F:66:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.33.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9d:74:09:47:db:37:a5:3b:a1:93:cf:fd:97:9a:3f:37:cc:
         0a:a7:1c:4a:07:48:8a:ad:30:ea:be:db:24:49:af:c2:ac:76:
         03:40:c2:a6:a3:cb:b1:7d:6e:86:30:57:2c:ef:c6:07:ec:9a:
         a8:e7:10:11:1a:09:c6:ef:fc:5d:3c:83:b2:80:f6:de:91:8a:
         21:69:7a:cc:c7:79:0d:f6:ad:1d:76:af:18:4c:32:8b:41:3f:
         e3:cf:4a:0f:fc:c3:dd:f0:61:8f:4b:cf:4a:48:98:40:1f:3b:
         bf:7b:91:a9:5d:f3:e2:60:4b:4e:8c:59:22:6b:60:65:0e:40:
         39:a2:83:56:d1:34:df:7f:78:5d:e7:d9:bc:61:07:ec:83:50:
         b3:60:91:2e:f9:44:b2:38:99:e2:cc:10:41:29:2c:31:52:c7:
         e0:c3:78:5b:d4:e7:cd:e5:7f:23:f2:3c:ab:ca:06:70:74:1a:
         d7:88:ec:09:e8:db:be:6d:58:f5:99:82:52:df:4a:0a:08:55:
         fa:2e:d5:c8:41:1b:2f:bb:4d:69:80:1e:84:e2:c4:a5:d5:5e:
         ea:5b:c9:1f:3d:eb:e7:c9:71:1c:12:e2:de:d1:87:a3:19:9f:
         9f:11:cf:e0:fa:d8:86:a5:28:b0:0e:43:f4:82:da:84:90:60:
         75:8f:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org