Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
File:                     2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json)
Hash identifier:          bzbgEIiTW7z/BrBIInCDZGLLA3TopEP8eUwpbD0D1Vs=
Subject key identifier:   75:41:2B:5B:89:F6:BF:FB:9C:BE:D7:F3:17:1E:72:F4:97:82:74:3F
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584789EBFE0922BD94FFF8A6B400
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     398202
IP address blocks:        209.178.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fe:09:22:bd:94:ff:f8:a6:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=97dfa70e-01a4-4bcd-9798-575e847d9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:1b:3e:d1:33:a2:62:07:d2:83:1b:86:b3:
                    c3:52:6b:13:69:8c:f7:63:de:a5:01:c9:0d:0c:89:
                    e6:f5:be:28:53:35:41:45:04:53:74:35:f4:6f:32:
                    80:95:65:75:20:03:6a:a8:a0:f9:9e:b5:14:d4:b1:
                    70:cf:f9:d3:2e:78:7f:ff:e4:f4:65:90:f2:32:e7:
                    63:93:1e:f0:fa:4c:50:3f:d9:c0:a8:1d:6d:a7:41:
                    39:be:e9:49:f8:5d:5c:3e:52:0c:a2:bd:f5:58:1b:
                    47:bd:50:1e:09:e0:5f:78:df:d6:98:dd:08:be:aa:
                    62:6b:8e:cf:68:f4:57:82:6b:fa:d3:c1:c8:b8:d0:
                    1c:72:a3:b1:bf:5e:50:6d:ca:a8:f2:0f:1d:ef:88:
                    4e:3d:ac:9c:14:2d:6c:7b:ce:8e:15:e7:91:05:84:
                    f7:98:06:29:5d:3a:a0:6d:42:41:31:b9:8c:53:71:
                    f4:0f:5e:dc:99:3e:97:02:99:7a:59:a7:a9:cc:f6:
                    30:6a:fb:46:3b:8e:53:8e:83:31:0d:06:8d:d3:1d:
                    d1:35:2f:84:84:47:8e:c6:1a:c3:72:2e:4c:66:cb:
                    b6:83:62:87:45:42:80:14:da:53:da:db:e2:66:8b:
                    a3:eb:a4:44:a7:b3:d1:f6:6b:75:d5:b1:10:db:17:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:2B:5B:89:F6:BF:FB:9C:BE:D7:F3:17:1E:72:F4:97:82:74:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:94:71:45:f8:12:6b:b0:24:61:3a:97:5e:7b:3c:fb:ed:ff:
         ae:37:16:09:cb:55:c9:94:43:04:4a:0a:9b:e2:b0:a1:d0:40:
         cf:b5:ce:c7:4a:ad:2f:da:17:25:9e:e0:6b:25:e8:4a:e9:43:
         62:11:77:9a:b0:2f:d6:eb:64:8d:ab:c7:e7:53:df:0c:3f:ac:
         8e:e9:ff:16:eb:76:ec:0a:f7:58:0f:75:7e:43:6e:7e:d8:54:
         b6:c7:40:76:9c:aa:2a:e3:85:30:29:c9:4e:b1:ce:9b:a8:d5:
         2c:f3:9a:f3:69:30:06:73:9f:66:2d:aa:48:14:62:88:55:64:
         ef:27:69:11:40:c9:36:68:c0:24:d4:76:7a:38:66:92:46:53:
         3f:da:10:61:c1:15:1c:b3:2a:15:27:41:24:03:54:29:1e:be:
         24:b3:c6:00:90:b0:5f:ef:f9:33:31:9b:16:11:0b:10:61:c0:
         2b:75:33:b9:2b:82:66:d7:c0:c4:ab:17:3c:05:a6:3a:ce:1b:
         a2:40:98:03:22:55:3d:23:b1:de:46:20:9e:35:0a:5f:b8:02:
         de:e5:92:4e:a6:af:c7:00:c5:bb:7a:a5:c1:fc:ee:3f:11:c7:
         57:5e:dd:3c:42:de:47:7b:19:3e:32:3e:88:2a:2f:fb:6e:d6:
         c7:ea:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org