Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
File:                     10edbdbf-fefe-3135-b393-2a1c2718221a.roa (raw, json)
Hash identifier:          8mbz/giqk5wqbd9cw381lhZXgBDkqJST+F1RFIkFVHY=
Subject key identifier:   98:39:D8:E7:6E:D0:F3:41:56:A5:04:99:59:A2:3F:27:0B:A9:48:DE
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F432858479AABEE609170BA133CCAC880
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     36000
IP address blocks:        142.71.8.0/24 maxlen: 24
                          142.71.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ee:60:91:70:ba:13:3c:ca:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=e726c902-d09e-4ed9-98c8-3ba77ab8c106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bd:b1:7d:ae:a0:3a:7f:bd:81:b9:45:dc:20:
                    23:d7:b7:e1:44:ca:b3:83:ab:7a:b7:e8:ab:78:55:
                    17:6f:cb:8d:59:6c:c0:6a:51:48:78:e0:8d:7f:18:
                    90:4e:68:24:2c:83:a8:78:64:2f:4d:77:72:8f:66:
                    81:1a:5a:ce:10:35:48:af:ce:65:ed:44:93:4b:75:
                    3e:7b:48:76:3f:3d:49:73:87:75:e0:3f:0e:18:1c:
                    15:73:81:46:82:81:36:28:04:14:e4:93:16:a6:8c:
                    e4:27:9f:07:9b:09:d6:75:0b:08:00:45:2d:60:64:
                    99:96:f4:f1:c5:df:0b:d2:1e:2a:2e:ea:e4:83:be:
                    1e:ac:1a:a6:82:5b:34:e7:7b:30:8d:30:b6:5b:34:
                    c9:23:ec:eb:c7:b9:3b:37:67:74:c4:3d:86:6a:94:
                    ea:f4:82:f0:6d:30:94:40:f6:1e:28:5e:7f:02:86:
                    88:77:15:1e:a4:76:c3:71:15:99:6b:a7:54:75:05:
                    35:d6:c0:8a:ac:dd:9e:a9:4c:aa:be:85:e4:11:e2:
                    65:8b:be:87:03:55:c7:6a:6a:00:47:0a:97:4f:21:
                    74:c0:86:33:06:ca:59:bc:80:7a:6e:bc:13:01:2d:
                    03:b3:21:af:63:b4:60:d3:06:b0:0f:08:97:0d:78:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:D8:E7:6E:D0:F3:41:56:A5:04:99:59:A2:3F:27:0B:A9:48:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.71.8.0/24
                  142.71.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:f0:b2:f1:39:0e:11:16:e6:5f:59:0a:e7:08:84:c8:98:
         24:c9:62:cd:74:a8:da:2c:c0:41:a9:68:b4:b9:1d:db:2c:1c:
         60:93:f5:fb:ad:23:d6:c7:25:fa:09:22:9b:e2:4b:c3:b9:57:
         a7:6b:be:d9:8d:34:af:63:0a:f7:35:b9:35:ad:2d:f8:41:57:
         70:65:39:77:b4:d1:79:e8:ce:6e:8b:62:41:4a:bd:d1:80:f1:
         1a:26:54:d9:03:4a:51:85:fc:75:18:fa:c4:8e:4e:d2:8e:4e:
         b0:a5:c7:9a:26:ae:f9:3a:b5:3b:6e:2e:58:ea:d1:6b:fa:9d:
         3f:c9:50:a7:ad:1e:77:a7:33:a9:81:13:f7:fc:c3:ae:c4:4c:
         78:cf:86:53:bb:c4:e2:1d:e6:2e:da:47:3f:3a:88:10:55:52:
         d8:37:c8:ac:fe:ff:d1:ed:f9:4a:bf:fb:85:be:b7:96:7b:0c:
         85:64:55:36:00:a9:16:af:7f:c3:d2:94:32:ee:6f:01:51:fc:
         aa:e0:25:fb:68:28:40:89:55:04:85:c6:64:fb:8a:59:4f:39:
         3b:4b:b0:d7:8f:35:26:1a:49:e5:df:4f:17:1e:a4:24:11:f3:
         5b:cd:f4:98:40:b6:4e:81:0e:a8:10:57:02:10:5b:ae:46:71:
         09:a5:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org