Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
File:                     e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa (raw, json)
Hash identifier:          0/ypDPfngX2TELv30q/W05GDi2OyZFtNsE+7aljrV4M=
Subject key identifier:   CD:7B:DB:38:09:A3:3E:22:C5:A7:9A:6F:11:4A:A0:DA:DF:6E:5C:CF
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F432858473A5B937F26E598F0432CC600
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     209242
IP address blocks:        209.46.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:93:7f:26:e5:98:f0:43:2c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=f3356ae6-50ed-4aed-86bf-97b93588351a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:bc:8e:36:3e:b7:23:99:6a:7d:b6:eb:eb:
                    c4:b2:c3:f4:23:46:58:49:10:c9:9a:af:99:22:af:
                    a3:3b:eb:d8:01:d1:84:a4:3c:ed:d4:37:0a:c5:6b:
                    5e:da:b1:e2:66:51:f8:37:84:51:38:ba:11:70:64:
                    68:f8:2e:9f:47:15:4e:e8:0f:90:64:ab:f0:84:ba:
                    9d:2f:e7:a4:66:40:ab:49:b1:36:b8:5d:be:d9:b7:
                    cf:04:fe:41:47:24:05:92:ff:94:83:08:7c:22:64:
                    ad:93:d8:8f:ab:ab:d8:5a:58:97:01:ef:7f:98:0e:
                    3a:db:c7:13:40:b5:cd:54:1b:a9:d2:34:c0:a6:d3:
                    74:d5:7d:88:29:e6:99:42:af:4a:7b:fc:21:b1:8f:
                    f2:c4:31:2d:f6:4a:c3:79:ab:2c:96:e7:90:5a:8e:
                    46:26:86:ad:1b:04:a4:3b:48:b0:84:85:bd:c9:1b:
                    ad:56:ed:1a:b2:da:5b:58:2b:05:99:71:99:28:19:
                    0b:17:ea:81:3e:53:6c:e3:6a:f7:53:ce:73:67:8f:
                    98:99:46:27:f7:a7:d6:cf:05:d5:e5:fd:14:3a:24:
                    ab:40:fe:57:98:65:f5:69:5c:a8:82:f7:2e:d7:bc:
                    78:e1:a4:be:79:e2:5d:cc:48:e7:79:9c:64:95:04:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7B:DB:38:09:A3:3E:22:C5:A7:9A:6F:11:4A:A0:DA:DF:6E:5C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:1c:19:21:29:e4:cd:c9:17:ef:41:73:c8:74:a9:1f:72:
         57:84:f8:78:96:fe:ab:10:f8:01:d5:6c:9b:5b:87:8f:39:81:
         62:75:ec:73:44:32:b8:63:8c:d4:fc:d2:39:a9:f9:b6:04:4f:
         36:d5:71:89:dc:9e:85:50:4b:c4:40:03:9a:27:8e:9b:99:26:
         43:80:02:16:7b:c5:57:4a:c1:b8:e6:6e:ee:3f:a9:2c:03:67:
         d2:d3:49:24:65:18:98:24:11:69:20:02:53:39:aa:b7:99:ce:
         cd:ea:e9:4f:2c:a5:64:a1:51:70:e3:dc:9e:cf:e9:33:f7:f5:
         94:72:d6:7f:ed:b4:ce:d5:c9:d4:d1:e8:46:33:73:00:03:7d:
         f9:d1:90:18:54:09:99:25:57:0e:73:1a:49:ef:44:a1:65:40:
         07:24:ee:b7:5a:fe:d1:54:f3:81:1f:69:2d:2d:84:97:e6:5e:
         1c:a2:24:71:ce:06:ce:71:2d:55:21:85:3b:d6:10:fe:df:1f:
         d3:4b:cc:82:e7:09:82:c0:69:e0:74:68:1c:83:1b:fb:8e:59:
         11:92:98:e8:c6:a8:df:40:60:71:58:f8:9c:02:35:c7:50:c0:
         ce:c2:5c:c8:d6:fd:41:c7:2d:26:50:62:8f:95:ee:ef:d6:4d:
         ab:a7:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:44 2024 by rpki-client on console-fra.rpki-client.org