Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
File:                     79d8abae-3316-3d89-a2d0-f12238f8acbe.roa (raw, json)
Hash identifier:          XSktOd5lCSHXaZ9R0FrN3PkyDZkQSXpqsLIyexbQ78Q=
Subject key identifier:   96:D4:26:23:F9:A6:13:00:70:43:82:43:C8:8D:98:27:C0:B5:9C:0A
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858478CB68B1F664479C49FBEA6C0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     25934
IP address blocks:        207.42.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8b:1f:66:44:79:c4:9f:be:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8c58e6c5-0d12-42c0-ab1f-6f1cbcb334e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:e8:99:38:21:2b:19:55:e1:11:1b:69:1a:
                    45:f8:53:f9:87:72:6e:11:11:53:10:bb:7b:f1:f2:
                    10:60:d9:66:57:e0:da:9b:6b:bc:0a:4f:60:d4:60:
                    53:5d:c6:b3:92:06:2b:e6:15:59:71:a3:86:03:cd:
                    42:95:02:59:cc:45:97:2e:06:53:a9:a8:d7:12:47:
                    fb:6d:9b:7d:99:2c:42:e5:b6:2d:aa:85:b3:6b:4c:
                    f1:3b:16:86:ae:6c:4b:85:0d:09:af:e6:38:dd:9d:
                    08:a8:ea:66:f0:53:f7:7f:ff:b9:57:93:cc:9e:b6:
                    0e:75:e3:eb:b9:23:3f:cb:90:25:ff:b7:be:90:2b:
                    6a:26:a2:97:29:0c:e9:20:80:74:f1:0c:39:57:05:
                    24:5a:ac:ea:ba:e5:c3:4e:2e:d6:77:b1:90:80:f8:
                    10:a5:86:8c:1f:e7:ee:7f:55:de:fe:d8:44:81:c0:
                    69:23:d4:d0:33:96:60:6f:79:77:cb:2d:76:57:8b:
                    9d:61:dc:6d:df:60:43:a2:64:29:e9:91:8b:ae:c8:
                    c7:85:2e:40:95:0d:49:20:ca:4e:72:c7:7e:65:7a:
                    a0:fd:41:c4:66:72:0b:58:f8:0b:a4:13:95:44:4f:
                    bc:c4:48:0e:91:18:d1:1a:ae:fb:29:5f:2d:5c:30:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:26:23:F9:A6:13:00:70:43:82:43:C8:8D:98:27:C0:B5:9C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.42.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:66:58:50:a8:86:25:21:43:03:4e:83:39:61:24:db:35:
         1c:48:f7:64:9b:92:d7:e2:30:61:b8:f0:0b:f7:c5:a5:bf:d2:
         bb:e7:c5:28:7a:dc:25:7d:fd:1f:ba:0f:ec:3f:89:75:6c:3c:
         4f:35:e3:1d:6f:c6:f0:a3:88:6c:1c:1f:a6:fe:1f:09:70:f7:
         3e:ab:2f:a4:eb:98:dc:cc:8a:2b:da:9d:9f:d2:f0:39:61:47:
         0e:f4:85:4b:8f:48:a8:1a:85:36:62:e1:de:a0:3d:1c:62:67:
         e7:1b:ab:1f:d3:7c:69:12:35:11:b1:ab:e6:66:18:6e:cc:62:
         ca:ef:c0:47:6d:7e:36:6d:97:38:5c:bb:0f:7e:8f:38:d5:de:
         5a:78:63:fc:8b:8b:c9:7c:48:3d:e7:22:64:f0:c8:c7:69:d2:
         41:e9:1b:e6:8d:91:2d:44:52:e4:5b:55:ad:82:85:13:8d:69:
         96:62:8a:ca:47:c1:73:b7:14:41:0d:11:26:a9:29:f1:53:fb:
         2a:7e:7f:b0:29:87:21:3d:55:09:88:25:a1:3f:d2:5f:64:03:
         5e:1d:9f:a5:51:fb:ce:84:51:22:bd:22:c4:bd:6a:a7:56:aa:
         27:3e:aa:2a:8c:f2:da:6f:4c:44:a0:42:be:7d:d0:82:59:f3:
         a3:82:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org