Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa
File:                     749fa281-1ea4-3ef4-aecf-35cea6045162.roa (raw, json)
Hash identifier:          yY9rlsTHV/kw/oQIkrsGlKkFG6ztaF9ke6wtQwTUh54=
Subject key identifier:   53:AF:AF:45:3E:1E:17:69:18:FD:1F:84:C8:F7:1A:AB:F8:A4:D7:2A
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858476E0101CAF32AA08DD8A4B500
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     393740
IP address blocks:        147.124.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:01:ca:f3:2a:a0:8d:d8:a4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=4518cc0d-49b8-424f-90a8-1876b9a45b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:70:bc:a0:7f:ad:00:44:a6:59:43:94:db:
                    b7:05:82:cc:57:c6:5b:8a:8e:7f:a3:83:48:53:22:
                    ec:5f:60:3d:14:7b:3d:12:d2:01:71:1d:32:e9:4f:
                    dd:2b:5c:8a:7f:a8:75:5f:0d:78:30:c2:d4:c9:a8:
                    e5:91:d8:63:36:4c:51:34:40:6a:c5:40:37:bb:1b:
                    d2:bc:ec:2d:72:3e:bb:d2:7a:56:5a:58:0f:4c:da:
                    9d:c4:3b:6b:4e:5f:d8:fe:3b:3a:c2:3f:e3:0e:28:
                    2b:bf:59:4e:d6:41:ae:3e:1b:ab:78:43:23:4a:bf:
                    1e:97:66:41:cf:75:13:c7:96:25:cc:cb:07:b7:cd:
                    8b:0c:63:03:f3:a5:e0:27:11:e7:9d:8c:d3:d3:a6:
                    f4:57:93:36:68:2b:1e:d6:69:8c:cf:b4:79:d3:44:
                    53:b4:26:40:3f:18:7a:08:05:77:3c:14:b1:7d:da:
                    7e:88:91:62:29:39:86:63:ff:29:4a:c7:00:68:d1:
                    1d:0e:10:05:69:79:65:1d:bc:3f:2f:1a:32:cc:17:
                    b9:cf:76:1a:c3:6a:32:6c:be:0d:db:95:b4:31:19:
                    40:75:2a:5c:27:2d:2d:4b:5e:6d:50:ef:ac:e6:a9:
                    34:84:77:15:ec:05:03:dd:7b:dd:0b:1d:7b:39:b4:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AF:AF:45:3E:1E:17:69:18:FD:1F:84:C8:F7:1A:AB:F8:A4:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:d0:33:2c:b6:d5:8d:06:2a:39:4a:0a:9e:36:bf:a3:85:
         3d:19:15:a5:4d:6a:fb:ac:66:e0:14:4e:ae:00:82:54:f2:b1:
         ec:4d:c1:fd:13:92:b3:20:99:52:31:28:fe:6d:73:d0:49:df:
         4f:3b:fd:d1:a6:60:8f:c6:aa:b1:cf:2a:be:c9:40:6f:32:07:
         06:d5:83:9f:5d:04:3c:5e:a4:a3:45:31:32:71:9b:18:4e:59:
         27:11:f9:55:88:ac:7c:78:36:59:1b:b8:98:02:b6:b6:27:dd:
         4e:6b:39:62:3d:a7:d5:ed:1f:c3:2a:4b:a7:05:c7:a1:29:67:
         1b:5e:62:32:17:40:00:2f:dd:e5:3b:51:e6:02:91:82:c6:79:
         7f:b6:4e:c2:0e:ce:7c:4d:d3:c7:b0:65:6f:47:20:f1:ee:45:
         e6:62:87:40:1e:51:93:23:c9:5a:e8:25:f4:97:2a:0c:ef:02:
         ce:a9:9a:74:27:fc:0c:0b:69:1c:33:da:6a:fe:65:05:4e:a0:
         24:2c:d2:3b:f2:ed:bb:c6:f6:04:f7:49:1f:f7:98:f7:3e:f9:
         b0:e7:7d:7e:7e:19:64:7d:0d:a2:4f:c2:f9:72:98:cc:61:9f:
         6b:4a:2b:7b:f5:e6:97:b9:bc:e8:36:cd:76:ed:79:88:ff:12:
         5f:2a:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:11 2024 by rpki-client on console-ams.rpki-client.org