Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
File:                     b7aacbe5-842d-385f-b714-d6ba290e853d.roa (raw, json)
Hash identifier:          7RZ6LdE/RYG3n/9gB+QhLT7sUybRpXbaI/y+diK/g9s=
Subject key identifier:   5F:FE:CB:C3:83:1D:60:5F:E3:D0:DE:B6:51:3D:41:42:D9:D6:B8:E2
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285847AE36BEC43347AF7D07154320
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     25697
IP address blocks:        209.94.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:be:c4:33:47:af:7d:07:15:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8bd07a26-3abf-40bd-a048-445c834233af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:09:42:aa:f3:00:b3:c6:61:3b:0a:59:73:
                    08:64:69:18:65:a8:06:21:d5:e7:7a:3f:48:2a:ad:
                    e8:b3:b8:a6:35:59:b7:a7:5e:ca:c8:5e:b3:cc:c7:
                    28:13:23:01:9b:42:b3:65:f1:41:d1:20:a1:ff:da:
                    da:d4:18:8d:e6:68:0d:15:26:4a:31:b8:ee:13:28:
                    6b:a8:9a:8a:e1:72:74:cb:57:74:94:52:39:6a:56:
                    9b:19:39:6b:b7:c3:c8:2e:b6:53:fc:f6:29:f2:1b:
                    7a:64:46:14:34:f2:05:18:99:a6:e6:fb:3e:35:4a:
                    32:16:f5:89:c1:27:3a:82:4c:ae:94:b4:d2:fc:a7:
                    bb:86:9f:de:71:1c:70:14:78:4f:27:16:c5:54:a6:
                    d2:1a:a8:29:ab:b8:99:f8:fe:7b:99:2a:bb:a6:47:
                    ff:6d:52:3a:24:01:d0:cc:cb:2b:d1:b9:5b:0e:09:
                    bb:16:a3:c4:1c:5b:42:91:07:eb:71:db:17:6d:83:
                    36:42:10:56:f3:93:cf:a2:5d:66:92:05:cc:4c:e0:
                    bd:19:02:b7:68:9e:ce:3b:42:a3:86:51:4d:0f:56:
                    53:ba:11:85:d1:98:de:a9:3a:37:f8:0a:83:c9:93:
                    d9:c5:60:93:a9:e4:ad:ef:b2:92:78:15:fd:3f:4c:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:CB:C3:83:1D:60:5F:E3:D0:DE:B6:51:3D:41:42:D9:D6:B8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:95:38:66:26:fe:7e:d0:82:aa:0c:2e:b0:63:d9:84:bd:d9:
         fb:eb:fa:9b:08:e6:21:14:bc:c5:b4:a9:dc:31:61:fe:4b:e4:
         69:33:e7:12:74:7f:72:ab:c8:f5:f9:00:ce:0a:5c:e1:4f:88:
         c4:b4:6b:14:ff:f6:20:e5:44:9f:49:bd:d9:1a:f8:d6:8e:08:
         33:6d:bf:91:c6:ca:49:c4:ee:c3:ad:6a:4a:47:d1:50:80:b4:
         ac:bc:86:84:1b:a7:76:ac:af:08:8d:b9:2e:e0:ea:76:42:1e:
         34:f0:0e:5d:8f:e8:e1:0e:bc:5e:56:04:e3:85:75:ad:3d:58:
         fe:70:e9:12:37:0e:ff:c8:66:75:8f:de:4e:bd:95:eb:36:5b:
         35:9e:1a:8e:ba:65:46:aa:5a:31:75:2c:b2:84:e6:a8:91:d9:
         90:b5:b4:9a:bb:66:86:f6:ae:2b:da:6c:31:0d:d4:83:bb:10:
         c7:50:9b:27:90:04:fd:80:a0:aa:81:71:16:39:10:b2:09:97:
         55:21:67:d1:23:6f:3d:41:9a:85:c8:ff:f3:b5:49:2e:76:2e:
         d9:60:df:e0:6a:33:f2:a3:41:7e:5d:f2:ab:f2:bd:37:aa:b2:
         5e:15:1f:83:07:c0:4e:93:87:e2:87:9a:c5:d5:da:13:9a:0f:
         7b:0c:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org