Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/017af1b5-e26b-328c-b60f-4804d7273773.roa
File:                     017af1b5-e26b-328c-b60f-4804d7273773.roa (raw, json)
Hash identifier:          7GepWrSVWpJvt1PW8SO0G7nAull2OT6nXXNK3/snrGI=
Subject key identifier:   62:F2:D2:09:41:5F:5F:8E:03:00:09:A4:AF:82:38:33:BC:78:00:EE
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB7497C2D98CCF057BDE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/017af1b5-e26b-328c-b60f-4804d7273773.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     7385
IP address blocks:        207.230.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:74:97:c2:d9:8c:cf:05:7b:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=7f9814ee-5135-4116-9a41-173daef0a5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3a:dd:e7:51:c5:d3:d7:e1:e7:81:5c:01:a8:
                    6c:18:a2:46:19:00:f5:c4:b3:03:9b:f4:78:d9:46:
                    fd:9c:bf:2a:f8:c1:f1:89:11:5a:8c:5a:a3:50:9e:
                    fa:0e:69:76:ed:63:01:b9:05:3c:fd:f5:fb:2d:97:
                    9f:7b:4c:8a:3e:03:2f:90:22:d0:d6:f4:c8:2d:11:
                    47:58:23:d6:7b:2f:1e:0c:ca:6d:b1:52:5a:ef:2f:
                    58:a4:f4:65:4c:9e:e9:ff:bb:c9:d1:41:b4:99:ed:
                    c8:68:19:b3:ed:b9:40:82:17:c2:b5:6d:f7:c3:60:
                    08:9f:a4:3c:17:02:93:2d:11:44:22:e3:d5:be:12:
                    ca:c1:46:3f:d2:a6:fc:09:1a:d3:86:f0:82:0d:0c:
                    ac:71:4b:6a:5b:a2:1c:51:fb:e9:88:6d:33:81:d6:
                    7b:f9:fe:8b:55:84:2e:0d:75:fa:61:81:93:74:39:
                    e6:d4:9d:22:c6:5f:d7:fb:61:74:fc:1f:60:80:a8:
                    95:8c:98:d3:fa:77:58:38:9c:04:c2:8e:74:82:49:
                    62:e5:d8:01:b3:47:7a:6c:93:db:c1:1e:28:4c:56:
                    9e:00:a1:22:69:94:02:14:64:eb:a9:16:08:03:4a:
                    6e:64:7f:8c:f5:ad:40:59:55:07:6f:2e:6b:8e:5b:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F2:D2:09:41:5F:5F:8E:03:00:09:A4:AF:82:38:33:BC:78:00:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/017af1b5-e26b-328c-b60f-4804d7273773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:13:42:74:3f:63:48:f8:49:91:d9:ac:3d:e2:b7:d9:9f:
         30:cc:e7:d3:65:14:9c:80:70:c9:45:7d:c6:da:18:5b:1a:da:
         8b:77:45:9a:fd:dd:f6:0f:6a:b2:3e:f4:a5:bc:26:1b:5d:68:
         a9:70:f8:66:cd:54:4c:c0:6b:b1:22:e9:fc:54:6e:18:8d:fa:
         56:f5:e9:a5:27:5c:f3:e0:88:f5:02:3f:f4:be:49:0a:5f:55:
         9c:90:21:79:33:ce:b4:d9:39:22:cb:f7:7c:6c:1c:39:a2:90:
         de:2d:b6:b8:2e:70:c9:65:08:6d:36:26:3d:df:5e:26:2a:87:
         36:8d:12:d3:ec:46:cd:38:c1:42:bd:04:dc:05:1b:e4:6e:61:
         c7:0c:58:95:87:f1:9a:59:b0:67:41:28:3a:68:ab:80:24:16:
         82:06:cb:df:f1:4e:94:1b:be:4a:fc:b2:6d:ed:8c:00:69:5f:
         f8:20:c5:30:9c:63:6e:dd:5f:10:a5:e8:98:73:e7:06:34:db:
         06:e2:cd:4c:0f:32:79:d4:a0:25:8c:ac:c1:d7:a9:b9:91:80:
         45:a1:e5:20:0e:14:88:05:41:42:46:ad:e9:1a:f2:1a:b8:e1:
         be:ab:d1:b0:02:a2:7f:b1:a2:35:43:cf:ab:24:ba:4d:53:9f:
         8a:dc:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:22 2024 by rpki-client on console-fra.rpki-client.org