Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa
File:                     43923168-7671-34ef-8e05-2404a6ab8830.roa (raw, json)
Hash identifier:          +8XavRqwqoYbsDZ8cXuZ/qdfA8GQ83aCbSH/deWbwcQ=
Subject key identifier:   51:84:57:13:56:D8:B8:05:B2:94:CB:7A:32:D3:90:36:1D:CC:7A:51
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858475EA621426D42BBFB3C73C800
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     398068
IP address blocks:        207.41.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:21:42:6d:42:bb:fb:3c:73:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=90423538-5874-463a-9fbd-8e3a288e24d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:99:0f:00:8a:87:f0:26:1d:2f:24:8a:50:
                    b9:e9:fb:18:fb:fe:95:aa:4b:4b:53:2e:df:37:13:
                    1b:b4:a3:c0:51:a5:cf:ac:40:e9:31:db:b4:1f:ab:
                    0a:bd:ec:48:df:fb:85:37:7d:2c:0b:f3:03:3e:20:
                    a2:85:6a:7c:68:73:e2:48:b2:71:82:ae:68:e7:a5:
                    f7:2b:9b:af:d6:05:37:78:ec:79:29:f0:99:39:17:
                    cf:6f:c7:f3:a6:26:0f:d3:af:00:12:92:a7:1f:06:
                    1f:76:96:f6:19:02:8d:37:41:ae:7f:83:83:78:cc:
                    d1:20:5d:8d:bf:57:dd:19:e0:c2:d5:ce:0e:5d:eb:
                    df:e0:e4:c3:6b:41:db:08:d3:4c:f2:5c:92:bf:66:
                    43:61:80:59:24:8c:94:05:a4:70:06:dd:57:c9:7b:
                    36:b4:72:64:cd:83:5e:95:c7:c6:b8:0b:8e:b5:0a:
                    1b:78:74:1a:c5:3f:52:61:c9:5e:19:fe:26:93:6f:
                    a2:81:e8:a3:dc:a5:3a:83:a4:68:9a:58:1b:5c:4b:
                    90:dd:06:cc:da:d7:77:79:21:43:20:ac:94:5f:d0:
                    e1:a3:9c:ee:c6:4d:ff:02:e6:c3:84:76:80:7a:92:
                    0f:8c:73:c8:8a:a7:30:e3:04:1b:0f:64:19:7a:ba:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:57:13:56:D8:B8:05:B2:94:CB:7A:32:D3:90:36:1D:CC:7A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.41.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8b:5a:42:a5:5c:e4:b0:0f:8d:10:ee:91:b1:97:31:7c:3a:
         e9:d6:ab:9f:7a:60:af:5f:13:25:07:a2:16:a9:ff:c8:86:b3:
         07:f7:95:4e:55:1e:50:88:81:7a:98:e5:e2:d3:a8:22:ef:e1:
         8e:41:ce:83:76:9a:21:18:9f:93:90:4f:31:5a:2b:a9:6a:0d:
         6a:d1:86:02:7a:5c:47:a6:9b:ca:e8:c6:c5:d0:e3:dd:d8:0e:
         03:b5:5a:fd:4f:e2:0a:b9:99:1b:db:2d:e8:b9:a5:4a:e1:7d:
         38:cc:a8:b0:10:6b:17:c6:eb:ab:61:48:b3:f0:c3:91:d2:6a:
         41:fe:e1:55:53:05:6b:a8:4e:93:23:71:9e:65:80:5b:e7:6a:
         92:c6:71:dc:e3:4c:3a:9a:0b:2f:f0:7b:a4:8e:35:4a:3c:41:
         45:49:8a:da:44:4b:a5:38:30:d0:63:58:89:6e:05:8c:03:6d:
         f9:b2:ab:29:a5:22:55:c5:5e:ef:0b:03:fe:2f:d8:99:22:46:
         7e:19:cc:ee:4c:3e:cb:16:a2:4b:cf:f2:62:68:ce:4b:af:3a:
         5d:e7:f1:64:23:e1:c3:c0:cf:30:85:bf:47:68:fb:e9:f3:97:
         93:73:12:6d:74:44:ef:21:7c:1e:be:9b:f9:95:48:7f:fa:1b:
         df:80:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org