Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
File:                     bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa (raw, json)
Hash identifier:          vhIslAgmt/yi5dVP/kMLjbq883hM93W/CRnI3GVkybg=
Subject key identifier:   51:30:A0:C7:7A:8F:F6:C3:56:0B:79:B9:E1:C5:87:17:3E:E4:57:29
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F43285847537B6A45F37046FAD5466580
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     11978
IP address blocks:        192.5.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6a:45:f3:70:46:fa:d5:46:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=e5203793-f3b7-4a39-9c11-291ce8f682bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:ad:f0:ee:7a:2f:5f:11:6d:04:2f:4e:d7:
                    2e:69:a7:73:d0:50:29:6f:88:82:24:27:9e:b3:62:
                    51:72:c2:5f:b5:0a:ef:d0:a6:6d:f5:ce:fa:41:26:
                    ce:e4:94:85:54:23:83:51:da:00:53:90:ac:27:bf:
                    cb:80:2a:a9:14:24:27:7f:e4:1b:74:71:a6:55:a3:
                    73:a5:80:23:b8:d0:3c:17:d5:8b:d7:aa:99:64:17:
                    16:5c:cc:c7:0f:ad:cc:e3:15:2b:1a:05:77:b0:d3:
                    20:80:9e:dc:f7:aa:64:ed:48:c3:ee:6a:d9:79:6f:
                    2c:8e:1c:d9:65:b2:27:69:d9:99:47:33:46:66:8d:
                    28:f2:15:3d:eb:71:33:f8:9c:6b:d3:13:70:9f:2f:
                    4e:3a:df:fe:82:96:16:7e:46:6e:df:1b:2b:27:1b:
                    c6:d8:a7:76:1f:c0:96:dd:9a:53:30:7f:90:c3:be:
                    a1:8b:e3:dd:f7:3e:af:94:f1:e2:14:2d:06:49:64:
                    fe:38:e8:c8:9a:8b:93:ff:6c:26:77:c2:1c:76:ef:
                    f0:c8:df:ae:16:60:13:e3:ef:d4:d0:4a:95:58:51:
                    bc:ea:0f:70:a5:cd:9c:a7:87:2f:7c:91:59:91:18:
                    61:71:cf:2c:37:a4:90:62:5c:0b:e6:aa:55:e0:c6:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:A0:C7:7A:8F:F6:C3:56:0B:79:B9:E1:C5:87:17:3E:E4:57:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:90:34:3f:c4:1e:0a:4a:71:7f:50:aa:d3:d9:6e:8e:ef:
         1b:f6:de:ec:df:5d:e6:5f:02:f2:f4:fa:a1:68:06:75:8c:bd:
         c8:96:d8:ba:c0:38:3d:0e:de:d9:90:6c:31:f2:db:dc:e8:a2:
         bc:80:4a:6d:99:aa:41:a4:bf:1a:ac:cc:d9:dc:3a:5a:33:e3:
         bd:b2:cf:f8:4b:c4:c8:7b:d4:cf:e7:0c:1c:86:8a:80:ac:1b:
         ec:9e:d0:f4:47:69:60:f6:88:af:ca:fe:ad:5c:d5:20:75:96:
         57:de:f9:cc:02:40:78:96:70:ae:79:b7:52:d3:64:9b:f8:17:
         fc:5e:d2:83:06:31:70:55:c3:20:58:53:46:da:b9:1e:f9:16:
         8b:06:f7:c7:ad:31:8b:52:cd:7a:37:c7:11:5e:90:18:79:fc:
         39:b7:81:37:1c:aa:6d:65:28:65:56:cd:b9:b6:ce:a4:81:6c:
         9f:0f:c7:dd:58:74:02:ab:fb:bd:44:35:ed:24:01:5a:b9:24:
         8b:0c:ac:f4:d3:e5:62:73:26:fd:0b:84:83:99:00:fc:ea:93:
         ac:b1:92:4c:aa:b5:16:03:7a:be:87:00:8a:82:b6:3c:8e:e9:
         25:c8:83:9c:78:73:c4:c0:79:05:e9:91:4b:52:6b:35:91:45:
         10:2b:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:33 2024 by rpki-client on console-fra.rpki-client.org