Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa
File:                     9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa (raw, json)
Hash identifier:          JMhJ7UVmS5ME44Iwnm0O09XnN7KPZffCM53OLDZD/yI=
Subject key identifier:   CD:ED:9D:D6:BA:66:A2:47:08:00:37:FE:74:44:E9:AE:FB:2B:41:AE
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F43285847C1DF5319154E2383BDB9A4C0
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     395403
IP address blocks:        192.135.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:53:19:15:4e:23:83:bd:b9:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=5767edf4-3df8-4e6b-b187-f6e143cddc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:b9:28:8d:59:15:17:8b:e2:b6:d6:58:4c:
                    32:7c:4c:0c:64:6e:f4:f0:74:8e:5b:20:9c:a2:3b:
                    d3:f4:a1:09:fb:80:26:90:bb:56:b8:f2:f1:40:99:
                    a0:c8:d0:fe:a3:df:ef:67:ff:42:80:e4:40:38:7a:
                    19:b0:8c:b2:14:74:dd:71:81:ed:26:9b:a6:65:df:
                    20:b2:d9:8f:1f:3a:71:1b:2d:eb:26:81:50:50:21:
                    dd:37:3a:7e:a2:13:34:1f:38:b3:e5:5e:8f:01:77:
                    46:7f:f0:f4:43:ae:04:8f:25:f8:c9:3c:26:2e:b0:
                    3a:a0:21:26:4e:d7:88:90:e1:7f:42:01:71:8e:b0:
                    a5:20:67:ea:46:dc:be:82:9d:76:2e:da:04:97:fd:
                    a2:8b:cc:0b:7d:38:cf:ff:ae:1a:a3:ec:8a:d7:09:
                    62:f0:5c:8b:6b:46:fc:b0:43:03:d4:25:e4:b1:16:
                    6d:9e:f3:54:ed:2f:e1:7d:c1:68:48:a2:2d:98:53:
                    9a:9a:ea:50:f6:50:81:5f:f6:9a:78:3b:eb:26:b8:
                    24:c9:62:f5:2e:11:9e:28:e3:2f:36:97:41:af:1b:
                    8e:24:cf:8b:cb:72:d3:bf:af:41:78:e5:e3:f4:63:
                    2d:24:97:66:0b:81:4d:40:61:60:bb:83:0a:53:40:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:9D:D6:BA:66:A2:47:08:00:37:FE:74:44:E9:AE:FB:2B:41:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:b1:b3:fe:61:5e:5e:a9:57:07:ae:1f:77:29:46:b0:44:
         03:39:89:fe:5d:38:63:f6:80:dd:37:f6:55:29:18:1f:d9:05:
         d4:40:01:44:ab:a3:d6:29:a3:19:6c:e0:17:2f:3a:16:c2:57:
         54:f2:ee:b2:6e:37:ee:ed:ed:f3:e5:f9:b8:d0:95:ca:16:6d:
         ed:0b:89:b2:6b:c3:44:af:7b:e8:20:c4:98:06:50:56:30:f7:
         97:55:14:54:02:9c:af:dd:ad:af:bf:40:d3:10:87:3e:ff:26:
         5b:d7:a7:f7:37:59:a2:e0:47:7f:c6:8d:8f:d5:b7:32:a5:77:
         d3:72:0b:03:6b:06:b6:5c:27:96:8b:db:19:4e:7e:11:ca:68:
         07:6e:4b:51:a2:82:16:c9:44:5a:dc:7e:02:c5:d9:a1:cc:d5:
         6e:18:04:5c:f3:94:2f:2f:27:42:83:6d:5a:94:b4:93:84:de:
         16:4a:25:da:5d:7b:f7:86:40:0d:2a:83:e5:39:ec:07:72:25:
         75:78:c1:7c:2b:1c:a0:2d:42:a5:21:b0:79:34:7f:36:08:fe:
         00:32:e9:5e:19:d3:c4:d0:ae:ef:28:1b:b0:13:0c:9e:5b:a1:
         20:d7:67:8c:e6:b6:92:f4:77:c0:41:68:c1:50:96:09:85:76:
         41:aa:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org