Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/675bd7f1-2408-31f9-9cfc-fec6dfc492c0.roa
File:                     675bd7f1-2408-31f9-9cfc-fec6dfc492c0.roa (raw, json)
Hash identifier:          IlPuwS3/2V7daZSkgo6bpflHlJL6ZRe1bmZnpih90Wg=
Subject key identifier:   36:66:CE:B0:3E:15:31:BE:9C:80:46:A2:C0:FA:15:94:30:A1:4A:AC
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F43285847BEF6D664BD740A9B8A341880
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/675bd7f1-2408-31f9-9cfc-fec6dfc492c0.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        192.243.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d6:64:bd:74:0a:9b:8a:34:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=93d86390-53b0-493f-adc7-e11444e1548d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:0b:b0:39:c0:7d:28:e7:53:b9:59:a5:ba:
                    a2:a2:b5:51:8e:94:e4:88:16:1d:6c:cc:07:00:8d:
                    4e:12:83:c5:49:39:74:be:56:1d:e8:41:bb:2b:9d:
                    13:5e:c9:d8:bc:57:59:58:03:f9:eb:59:89:b6:f4:
                    e5:27:16:4e:86:d2:5a:24:df:8b:20:a7:6b:82:e8:
                    19:0f:3d:23:05:bb:2d:f2:72:21:08:63:ff:70:09:
                    b5:8c:60:fe:f6:d9:3a:ec:99:86:35:82:91:94:fb:
                    1f:91:34:81:2f:7f:6c:42:85:e6:35:84:f2:e2:71:
                    f7:ce:ad:ce:a1:97:f7:30:73:e7:eb:56:89:e8:b3:
                    b7:4d:82:8b:84:61:88:14:08:04:3f:4a:ec:fb:bd:
                    f8:62:be:4f:3b:c3:16:7c:9a:49:8d:91:1d:11:b3:
                    50:a8:77:0d:e3:15:91:e6:1a:4a:86:3d:fe:58:88:
                    09:80:c6:71:85:f8:c7:78:a2:e0:66:ae:d9:12:93:
                    5f:a4:2f:d6:41:83:ae:04:12:c5:9b:2e:b9:c2:cd:
                    92:16:f3:f9:ec:ac:cf:5c:8b:d4:88:05:56:ce:59:
                    f9:d2:d8:26:0b:c4:6c:4a:ca:f8:00:95:dc:fd:e0:
                    b9:32:a0:f2:f6:2e:a9:df:f2:e3:99:e3:b7:2f:be:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:CE:B0:3E:15:31:BE:9C:80:46:A2:C0:FA:15:94:30:A1:4A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/675bd7f1-2408-31f9-9cfc-fec6dfc492c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:e5:5a:8d:59:31:1a:1e:97:a3:8c:df:db:fb:44:fe:b0:
         5a:59:a3:e5:55:49:c2:f4:ea:bc:14:2a:58:35:d6:da:0f:65:
         d8:37:ce:e6:d1:fc:98:b5:65:30:6e:bc:1e:cd:fd:d4:4e:8c:
         a1:8a:5d:8b:b5:8d:99:c0:46:69:8b:eb:96:0c:36:c7:02:74:
         eb:b2:d1:0e:76:b6:64:cb:ac:41:11:15:c0:0f:fa:ca:f7:28:
         8b:57:f3:37:21:76:db:f1:33:3a:b4:3a:0a:d9:b0:c6:76:87:
         91:56:91:df:ba:22:2d:0b:e9:28:17:4c:89:5b:03:9c:5f:06:
         56:1a:96:22:c8:b0:f8:85:8c:70:94:35:99:28:56:be:2f:6a:
         e4:43:4d:e0:35:24:eb:17:4a:f3:93:28:59:90:36:47:d8:30:
         6f:30:67:b9:35:6e:d8:79:c9:1b:7f:ae:e0:3a:0a:e2:53:28:
         d7:51:e8:64:60:b5:52:4f:a3:fc:53:17:53:60:be:2e:eb:d6:
         c8:84:9a:d6:d9:65:c9:40:f2:d6:78:5f:16:7e:1f:02:85:2b:
         c6:81:94:81:8b:83:af:59:bc:ab:a9:f4:ac:7a:25:e2:0b:fa:
         5d:43:85:9f:20:0c:4a:a0:a2:46:78:06:63:10:fe:e6:13:fb:
         5a:2b:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org