Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
File:                     e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa (raw, json)
Hash identifier:          zuSJy6J6+OdPKUTXJ4cJ2pRhsHp9Mn3T22EcH5eewc4=
Subject key identifier:   1A:63:D2:F3:6E:E6:0A:2B:A7:3B:2E:D5:F5:D3:D0:0D:20:EB:DB:17
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F43285847872133E125CA1B3CF83F76EC
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:33:e1:25:ca:1b:3c:f8:3f:76:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=57f291ae-4916-40c0-a570-d1231fe27273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:ca:f5:a1:f3:54:26:8b:46:f5:b0:e1:4e:
                    df:fe:f4:43:0c:e3:e6:55:42:39:9b:20:16:5b:ab:
                    b4:06:bd:c5:4b:d2:2f:76:37:c3:87:fd:e8:74:11:
                    92:7f:1f:05:c8:79:5f:f3:33:66:86:a6:ec:83:9e:
                    08:db:83:da:9a:64:d0:bf:5e:35:c3:6a:6a:7d:c7:
                    b2:cf:f4:e8:e8:55:08:44:a2:c4:69:9a:47:7a:18:
                    6e:71:dd:79:79:37:4d:fe:c8:b9:f3:68:71:51:2a:
                    a2:f0:80:07:8f:9a:8d:02:f6:cd:bc:ef:cc:03:8a:
                    7f:c4:02:02:f3:8a:bb:6e:37:0d:e3:22:1b:15:5f:
                    78:53:6e:a7:04:a2:b3:5e:23:1a:22:d3:8d:a7:42:
                    76:43:f5:93:99:5d:b5:96:23:3f:1d:3b:d7:66:56:
                    a3:6d:d3:aa:83:c1:fe:45:1d:9b:5d:15:48:29:ee:
                    eb:f0:cf:ba:50:10:fb:a7:ff:7e:95:43:95:77:e7:
                    df:23:1c:a8:8c:72:15:f4:4d:cf:36:01:f5:33:c3:
                    ae:21:15:b2:38:9e:92:e9:29:ee:7f:f9:24:32:70:
                    74:51:5c:db:4d:20:2d:e0:ab:26:f4:da:b2:0c:0e:
                    91:0b:4a:dc:e1:53:d2:64:86:aa:74:48:15:f3:5d:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:D2:F3:6E:E6:0A:2B:A7:3B:2E:D5:F5:D3:D0:0D:20:EB:DB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/e09aff01-cfc9-3e48-96f7-11c05eea2a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:63:10:4c:03:d1:56:dd:ec:ae:56:72:8c:52:6f:b1:2a:
         f1:d1:30:71:2a:25:85:84:15:74:bc:36:08:60:bb:59:9b:d3:
         df:66:94:e3:19:34:4d:19:f4:56:ea:80:07:3b:ed:42:c7:6e:
         af:fd:fd:35:d4:39:1f:72:6b:dd:a0:94:6b:6d:a0:f7:10:f3:
         f8:3c:b0:2a:1e:87:68:8f:c4:e4:e9:b7:8d:76:c8:74:1f:ef:
         42:f2:1e:f5:9e:d4:d9:c9:e7:3f:79:14:40:8a:29:cb:e5:13:
         49:4a:1f:de:ee:2a:cc:02:c1:4c:ad:fe:5d:c7:91:ed:31:67:
         d5:cb:24:7b:7d:85:a0:75:92:54:3c:89:d5:06:af:60:1c:b1:
         be:e0:94:74:63:20:f7:f9:9b:86:1e:9c:fb:08:46:e5:21:aa:
         18:a1:9c:4f:00:a9:20:a1:6b:c7:bb:d5:48:0d:8c:68:e2:ba:
         14:12:38:bf:77:3b:3d:56:72:9e:59:c1:97:b8:84:32:33:0a:
         6b:1c:ea:b0:b1:08:c4:aa:1e:93:d3:3e:da:90:16:15:92:34:
         34:f6:83:81:ab:7c:f7:11:6c:6a:66:f4:c9:bf:eb:bd:d4:a0:
         cc:69:ec:63:c9:bd:da:de:e3:13:43:ea:20:6e:0c:17:63:7f:
         95:a0:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:28 2024 by rpki-client on console-fra.rpki-client.org