Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
File:                     be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa (raw, json)
Hash identifier:          Yfr3Da4fnN7pYhJuGGbeRYlFIEXHz4UT46vPOV3+enc=
Subject key identifier:   0F:43:3B:D9:E5:12:CC:2E:69:73:48:20:59:23:7B:4E:50:A7:5E:D3
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847B3CC13412C6AAC4B71DBD900
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     26565
IP address blocks:        209.237.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:13:41:2c:6a:ac:4b:71:db:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=74c73113-8871-48a9-afb8-c0ef58d0e404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:f4:43:0c:89:f2:57:c3:ea:00:df:84:b3:
                    13:90:b2:56:10:55:52:f7:82:bf:2d:97:fe:a3:a0:
                    5d:d1:7c:80:1a:a2:f0:e5:d8:7b:99:c6:ee:aa:04:
                    9a:b2:b3:1b:c9:89:0e:6b:bc:d6:af:e7:2a:5c:c7:
                    05:0a:b0:2b:0e:c4:28:7c:25:99:0d:61:4c:3e:1a:
                    62:f8:6c:98:da:7e:e5:7c:1a:9d:61:8e:69:f6:53:
                    d3:9d:33:ec:f5:d7:58:6b:ff:bb:ac:7a:4c:60:1b:
                    b3:5a:40:3c:33:05:c3:96:14:a2:8e:31:19:b0:6a:
                    46:e2:c3:a1:2c:1c:cb:0e:82:fa:09:7b:43:1e:a7:
                    23:cb:a9:98:49:0f:0b:bc:62:f9:fc:2f:66:eb:6e:
                    da:fd:fd:b9:f7:4d:86:2c:d0:8e:72:b9:e7:68:61:
                    20:e9:97:f0:e0:a9:d7:99:71:11:38:16:9e:f2:9c:
                    df:bf:75:4f:ef:42:e9:a9:41:e3:11:fc:c2:81:2d:
                    5e:7b:96:7b:93:9a:cf:58:20:ca:76:86:00:85:09:
                    a9:23:57:1f:8b:4d:d4:fb:aa:a7:10:bb:9e:9f:e9:
                    f1:41:b4:26:38:d0:7a:8c:8c:3a:53:ba:89:4b:14:
                    42:3f:c7:5d:43:44:c2:80:c5:06:ac:ff:85:1e:8d:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:3B:D9:E5:12:CC:2E:69:73:48:20:59:23:7B:4E:50:A7:5E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:99:18:be:86:5a:cd:53:5d:0e:12:3c:1c:6a:24:4f:db:
         06:b5:b4:d4:90:54:65:a7:97:97:e3:3b:e0:aa:a2:b3:47:78:
         da:c3:45:e8:b1:de:34:a2:c4:72:ce:7c:16:34:80:7b:92:e3:
         92:2e:58:1f:a7:ae:2c:6b:d3:64:b8:1c:65:05:0b:af:81:10:
         c0:6c:a5:32:cd:30:83:ea:02:7d:44:d0:23:a8:6a:0d:92:95:
         17:83:31:80:25:29:0a:93:0e:ef:49:41:cc:42:dd:e4:4e:39:
         4b:a4:b7:7e:20:64:15:c9:80:78:11:21:7c:c5:2d:06:0a:c9:
         e1:10:a1:b8:3f:5b:4f:19:6f:1f:4e:33:44:04:21:23:a2:6b:
         2b:f2:55:a4:a5:02:db:02:95:cc:94:0c:78:71:04:5f:35:06:
         6e:f1:8e:f3:56:62:f6:43:f5:f4:90:d0:76:a4:2b:a0:fe:e0:
         57:05:57:a5:65:92:92:21:2a:91:49:d0:a0:2b:5e:25:d7:82:
         af:8a:0a:3f:a0:8e:29:fe:00:fc:76:7d:16:32:aa:7f:dd:71:
         44:9e:89:83:04:38:43:c0:7b:c8:e2:17:8d:1b:61:71:32:df:
         3f:84:82:a5:d0:9d:a9:98:04:73:31:ce:ce:61:d0:5e:18:9e:
         c0:a9:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org