Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
File:                     7fd5bf91-228e-3672-967b-c25d825ce3ff.roa (raw, json)
Hash identifier:          r9kJbwxLH9bhx2lGkBTu7mgZrdwoeDba72yngQw0ne8=
Subject key identifier:   0A:E8:A6:53:8C:06:E2:10:50:E4:50:DF:C5:35:9E:AC:10:1E:0C:72
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584746EB5FED07BCE134D6C738C0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     55015
IP address blocks:        209.183.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5f:ed:07:bc:e1:34:d6:c7:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=12990ae1-005a-47e8-89e1-bdf046894cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:51:9e:11:b6:e0:a5:f2:9c:03:d7:9f:7a:
                    79:96:af:35:76:45:c7:35:ba:db:d2:20:c9:70:f2:
                    3e:1f:d8:41:7c:4e:c5:8c:6a:68:88:1c:d6:36:f2:
                    59:bc:6f:86:c7:72:0e:d0:bd:5b:57:ae:15:00:b3:
                    71:c8:c0:6e:82:ab:45:17:2d:9b:12:10:74:59:37:
                    86:fd:7c:69:b7:cb:27:7f:21:29:58:45:b1:af:c3:
                    08:2f:14:44:19:95:e0:dc:7a:27:15:72:15:d0:b9:
                    fd:11:52:70:b2:b2:94:48:6e:d9:3f:b5:b5:72:78:
                    fe:1b:ce:9c:29:4e:b0:f6:18:8f:02:c5:34:3e:c4:
                    25:90:6c:13:3f:03:d3:94:a3:84:5e:4f:43:f0:4a:
                    59:f9:97:4a:c6:93:70:9b:b1:09:3e:49:6b:a0:c8:
                    e0:0e:d5:6e:f8:f3:4b:46:3b:08:ab:bc:52:9b:a2:
                    01:98:7e:a0:e4:d1:07:fe:eb:55:f1:27:b4:2f:37:
                    15:a8:ec:b4:a4:33:5d:33:ec:6f:36:bc:f7:18:78:
                    3f:1f:ff:8e:24:ab:ed:bb:15:73:aa:19:92:d5:be:
                    c0:0c:2f:68:14:32:84:26:17:7b:79:5f:2b:8f:77:
                    bb:92:a5:09:cf:86:15:c6:6c:7f:03:03:20:9e:ee:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:A6:53:8C:06:E2:10:50:E4:50:DF:C5:35:9E:AC:10:1E:0C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.183.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:dc:f5:d1:90:37:9f:6d:01:54:dc:30:d0:aa:10:74:8a:
         57:ac:db:92:ba:f3:c9:4d:0f:d9:8c:b8:5d:1a:3f:9e:73:d2:
         10:c8:24:f4:82:21:80:ce:eb:1b:89:ff:41:df:93:f9:9a:ff:
         74:eb:17:22:b0:21:63:c1:5a:b6:30:8d:31:63:45:43:ec:5d:
         6d:17:a1:4b:41:cf:de:8c:d8:3a:6a:4b:af:ae:e0:a9:62:18:
         da:8a:b0:0d:fa:82:af:ad:04:fb:e9:cc:9c:45:be:cf:3f:9f:
         9d:c7:6c:17:43:bf:9d:1e:d4:61:d7:a8:11:c9:ba:e9:b8:57:
         e1:58:0b:4c:5f:0d:dc:fb:41:40:91:60:48:aa:6d:bd:08:c1:
         d1:ac:93:2f:5b:57:8d:ba:5a:3a:58:52:d3:82:48:68:fe:b9:
         df:c4:72:c3:de:56:8f:09:e7:61:b9:1d:ad:be:73:67:1e:94:
         c3:44:d8:6f:3b:67:ee:2e:3c:16:4f:a3:65:c6:d0:2a:8d:20:
         54:bd:b7:89:54:b6:3a:e7:cd:56:25:16:98:6e:aa:b0:18:50:
         5e:78:ad:c0:76:16:d4:c3:a7:19:dd:17:57:12:eb:fe:9b:d8:
         ce:95:ef:af:e8:53:f2:1b:12:9b:0f:c6:7d:c2:79:98:82:03:
         5e:d9:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:23 2024 by rpki-client on console-fra.rpki-client.org