Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa
File:                     ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa (raw, json)
Hash identifier:          qutH8HDPD/byHV1W0qCbihk1j95Q9dbMkB232uHu2OE=
Subject key identifier:   69:BB:88:55:AC:02:A3:F3:E5:C3:6F:DF:65:55:04:6A:4C:90:14:27
Certificate issuer:       /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial:       010D0C9F43285847AE36C42DD15305945D7AFFC0
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     15296
IP address blocks:        204.209.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c4:2d:d1:53:05:94:5d:7a:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=753741f5-8d82-436c-9f96-b34cd7cc09ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:ab:ba:86:7e:ab:f2:a4:39:27:4d:8f:b5:
                    a6:cf:27:2e:ed:8e:e4:25:8b:25:bc:5d:78:63:6d:
                    f4:ad:da:da:56:90:1f:27:bf:6d:d1:51:c1:8e:80:
                    c3:f0:88:fc:3f:7a:d8:12:70:88:23:f6:60:16:ad:
                    da:13:83:ce:e8:9e:6f:d6:6b:85:35:1e:c7:c2:7b:
                    88:73:b1:ed:8d:d8:2e:a5:aa:f6:66:96:03:66:90:
                    df:d0:b4:ad:f2:a0:76:61:c6:37:e1:72:3f:f0:bf:
                    83:54:0b:37:cf:29:4b:25:cf:8c:c9:6e:9a:3a:8b:
                    3d:67:92:a6:3b:47:cc:9b:73:47:2e:61:ac:03:78:
                    ee:7f:f1:af:7d:bd:f8:0b:4c:54:c5:a5:1b:4a:79:
                    5b:5c:76:26:f1:f3:f3:d0:cd:d8:72:92:ae:68:1f:
                    c2:c9:6d:41:72:73:97:ab:3e:79:f0:1c:b8:28:65:
                    2c:36:0e:96:da:43:6d:38:cb:a6:16:b3:33:51:bf:
                    a9:6d:5f:26:54:fb:02:33:7a:54:f6:5e:7b:ee:32:
                    88:b6:ed:a5:2b:b7:77:86:d1:76:b2:6b:23:a1:af:
                    ed:b1:3c:7d:24:65:b6:95:14:a9:b4:d8:76:b7:10:
                    61:4a:c5:ab:c8:24:63:73:7c:63:ef:1f:10:15:b9:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:88:55:AC:02:A3:F3:E5:C3:6F:DF:65:55:04:6A:4C:90:14:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl

            X509v3 Authority Key Identifier:
                keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8f:81:32:35:7f:ac:ed:7c:19:aa:f8:47:77:f3:58:93:64:
         94:b7:de:29:4c:25:dc:bf:a5:96:cd:82:a9:43:9d:a2:29:c1:
         44:ec:fa:3b:8a:dd:39:7a:54:76:4d:ef:a7:52:fd:1d:03:ed:
         ab:85:50:ba:54:54:91:f0:dd:02:55:f3:36:0e:6a:c1:2c:45:
         b4:c9:f1:62:2a:1e:a3:cf:f4:76:6c:d0:68:dd:6b:b9:ed:38:
         77:14:06:96:56:aa:6a:60:02:b2:a1:1c:22:4d:66:87:db:ad:
         f3:0b:4c:a6:7f:1c:11:a3:f0:9c:12:81:f0:f6:4f:46:58:d7:
         71:17:ac:51:37:68:17:8b:3b:9d:05:02:c1:a0:40:bd:18:63:
         6b:a8:46:8e:fc:d0:c0:07:31:df:37:3e:50:b3:63:5a:1c:4e:
         bb:91:62:e5:5c:8c:b3:0b:d1:be:e5:72:4e:8c:c0:bf:c2:4f:
         36:49:e0:96:3f:28:13:8c:6e:75:bc:9d:2e:44:a0:ca:8c:69:
         2a:e7:c1:11:08:f3:28:f0:bf:6c:95:8f:88:7f:31:7b:d0:8d:
         3a:f7:6b:bb:c9:7e:bf:c5:66:09:a3:60:53:98:a4:db:9f:af:
         0a:e4:0a:4f:04:28:83:f7:7c:42:e6:f0:5e:a4:c2:b9:05:d1:
         df:6e:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org