Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
File:                     7253bf54-50b6-3248-9cd9-f777bdd3845d.roa (raw, json)
Hash identifier:          CQFaV+nNKyXGmSP2+idhkCPmVyQffLKr2uls9MGYqBI=
Subject key identifier:   DB:83:71:85:0C:86:ED:C7:B5:B5:D6:09:28:6A:08:E5:D7:28:2E:9E
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285847BAC6AB1E4C64970CFE2B7280
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     13536
IP address blocks:        209.198.82.0/24 maxlen: 24
                          209.198.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ab:1e:4c:64:97:0c:fe:2b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=4e9727c5-5a48-433f-a5f9-98b8b075ad40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:ed:9a:66:13:f4:ad:e4:9c:dc:85:57:a7:
                    d8:8c:62:fa:00:0f:55:34:6f:cf:94:18:9d:c5:14:
                    1f:83:b9:7a:11:3c:77:35:dc:8e:20:0a:44:6e:49:
                    fd:d7:2a:b4:9d:c0:6b:3b:17:78:ad:cb:4e:d9:eb:
                    92:0e:e8:e5:3b:4b:94:2b:aa:cd:3f:3d:8e:70:a0:
                    06:0f:8e:42:84:89:68:e5:d1:c2:9d:66:0b:b5:41:
                    39:e1:f9:1f:66:4e:9e:11:e5:54:60:f8:44:59:0a:
                    52:7b:2a:e5:8e:24:2f:37:c1:35:7e:fd:e5:14:78:
                    1c:30:bd:19:7b:47:aa:9d:0a:f4:82:23:94:80:80:
                    0b:d1:64:cf:4f:9d:45:c1:c9:3c:7c:97:31:1e:5d:
                    22:fe:d0:af:fc:11:31:b6:c5:f6:4e:de:d9:d0:ec:
                    db:09:ed:0d:50:59:31:28:4a:a2:96:e6:df:ef:d1:
                    92:e0:1c:f3:1b:86:77:a5:37:da:35:ab:a1:6a:c8:
                    92:bc:e1:a0:7d:f7:75:5b:c1:db:27:34:7a:07:2c:
                    83:19:45:aa:86:35:60:7d:fe:7f:07:59:c3:e3:4c:
                    62:04:1c:04:27:a1:8d:d2:d1:49:60:4f:8c:e9:e6:
                    de:cd:ed:83:23:b5:fe:74:1d:7a:a5:0f:b7:d1:5b:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:71:85:0C:86:ED:C7:B5:B5:D6:09:28:6A:08:E5:D7:28:2E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.82.0/24
                  209.198.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:b5:15:f8:e9:ba:00:3e:aa:bc:5f:24:15:1a:00:ed:6b:
         59:ac:42:f7:c5:9f:8e:60:91:9c:4f:b9:64:2d:df:8b:fd:b6:
         0b:bb:45:20:93:cc:1e:01:4f:88:89:9e:00:d2:9c:b1:77:6f:
         57:77:41:85:00:31:7f:7e:73:54:36:b7:d8:e5:c3:0c:36:4e:
         fe:5a:8d:55:19:35:96:5a:57:b6:a6:c1:94:13:e7:10:4f:df:
         b1:51:e3:cf:fa:21:58:09:bc:bf:d2:12:6e:22:34:ee:d9:3e:
         1e:d1:60:79:4a:a8:01:c1:58:b7:fb:56:bb:a9:f5:0b:7e:ea:
         28:97:04:f3:b1:36:fd:fc:d3:23:a9:da:04:64:ee:93:f6:97:
         6d:30:7e:8e:fb:b1:a0:d5:ae:64:ec:b5:00:07:fa:b9:de:dc:
         a9:ba:e4:75:87:10:fe:d7:ec:fb:93:26:c6:73:84:50:fa:51:
         f7:71:ed:13:a9:53:03:0d:c7:6e:43:bb:53:29:af:dc:70:68:
         d8:d0:9e:f1:c7:bb:e8:b7:36:f9:9d:8e:21:12:24:b4:b0:7f:
         28:45:87:b3:e3:8e:6a:ec:76:e4:88:be:3c:b1:e8:f1:9a:90:
         ed:78:51:bc:7b:5a:df:64:1b:03:46:ed:b9:b6:41:db:30:5c:
         da:9c:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org