Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/e24d5856-8b17-3fe0-8486-bfcc561ae2b2.roa
File:                     e24d5856-8b17-3fe0-8486-bfcc561ae2b2.roa (raw, json)
Hash identifier:          V7vBG67yV/8LlEsxH61Gflql1VfM8BrMnCTh0V/nM+I=
Subject key identifier:   F1:C0:9F:1A:4F:CE:16:BD:DA:B6:29:DE:FB:F4:26:C2:FA:5C:30:1C
Certificate issuer:       /CN=34030d10-1bab-4695-9ccd-098130bd2ff0
Certificate serial:       010D0C9F432858471AAE90BDF155EA834AD3F880
Authority key identifier: C7:51:FA:8F:1E:2F:9E:04:61:B3:86:C8:7F:8B:C6:0C:11:9A:88:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/e24d5856-8b17-3fe0-8486-bfcc561ae2b2.roa
Signing time:             Wed 04 Sep 2024 16:42:42 +0000
ROA not before:           Wed 04 Sep 2024 16:42:42 +0000
ROA not after:            Tue 03 Dec 2024 17:42:42 +0000
asID:                     401325
IP address blocks:        209.178.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/34030d10-1bab-4695-9ccd-098130bd2ff0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/34030d10-1bab-4695-9ccd-098130bd2ff0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:ae:90:bd:f1:55:ea:83:4a:d3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34030d10-1bab-4695-9ccd-098130bd2ff0
        Validity
            Not Before: Sep  4 16:42:42 2024 GMT
            Not After : Dec  3 17:42:42 2024 GMT
        Subject: CN=6da269f9-e5a8-43a5-83e1-f267e73b74b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:49:38:f8:d6:ef:5e:7f:7e:75:99:29:5b:
                    63:d6:b0:c9:61:a6:e8:55:b7:cb:b6:42:29:41:7b:
                    03:e2:e6:78:0f:96:54:3b:53:a4:b4:73:2e:af:36:
                    55:0d:68:2f:de:e2:65:cf:62:32:a5:53:7c:4c:30:
                    74:ca:19:c8:65:51:76:6b:aa:61:75:8e:b0:51:eb:
                    80:a7:ce:87:79:98:d9:6f:f3:de:1d:b9:a9:2c:ad:
                    85:ee:23:d0:ac:95:b7:06:e9:47:39:de:b5:e0:7d:
                    6b:41:40:f5:04:50:ee:62:0f:c4:2a:83:6f:54:90:
                    57:75:8d:cc:55:d3:4e:1b:71:94:17:0a:55:fb:4b:
                    e2:22:ef:c5:40:ef:71:ac:a4:91:2e:0d:2f:7b:e3:
                    71:45:7a:9f:6a:28:13:df:5a:d9:87:ba:b2:0c:40:
                    ad:54:73:99:e9:c8:bd:70:e0:ed:3d:cf:8d:7e:b6:
                    c5:fa:67:fc:ab:fb:c1:6e:ab:64:35:d0:6f:6a:a2:
                    8d:e0:7c:77:3d:49:65:c0:ec:d2:ab:c4:2c:5a:e6:
                    d5:a3:d3:b0:df:17:43:a9:7e:dd:6d:bf:44:6a:b5:
                    eb:a9:2a:db:9a:3c:20:b1:7b:5c:bd:7f:26:4e:56:
                    b9:60:5e:7d:b8:14:18:20:47:6a:aa:dd:11:84:65:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:9F:1A:4F:CE:16:BD:DA:B6:29:DE:FB:F4:26:C2:FA:5C:30:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/e24d5856-8b17-3fe0-8486-bfcc561ae2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0/34030d10-1bab-4695-9ccd-098130bd2ff0.crl

            X509v3 Authority Key Identifier:
                keyid:C7:51:FA:8F:1E:2F:9E:04:61:B3:86:C8:7F:8B:C6:0C:11:9A:88:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/34030d10-1bab-4695-9ccd-098130bd2ff0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:39:a8:90:08:42:15:54:dc:e6:41:93:50:3f:de:b4:9b:22:
         e6:13:d5:b8:b6:69:a3:78:dc:d2:c9:c9:bc:2f:5f:ee:e4:f0:
         52:e4:d2:04:36:70:f5:ef:65:3b:10:8c:31:a9:6f:a2:0e:89:
         d6:da:b8:8a:e3:ce:6b:bc:0d:d4:4b:10:c2:af:3a:c3:e9:a3:
         8b:23:84:93:4c:ed:96:dd:99:e0:00:3e:04:72:4e:fc:7a:d6:
         e0:a0:7b:52:2e:fb:43:47:54:61:d9:f0:0f:93:37:fa:11:84:
         c4:a9:ed:11:e7:51:4a:4d:fb:3f:5d:4e:43:f0:8d:7b:67:b0:
         b7:66:69:74:b1:50:21:41:f2:4e:6d:df:d1:10:2b:01:ac:84:
         9d:d3:57:30:f5:81:03:e2:29:89:29:ca:42:46:47:b3:07:3e:
         bf:a5:ab:3a:48:9c:9f:5c:40:df:78:25:68:5b:60:d9:2d:38:
         b5:58:7c:18:bf:d9:75:55:ec:8e:49:a7:11:a0:46:d8:27:c7:
         18:53:07:44:93:2a:14:14:f9:47:69:bf:74:a0:ea:05:ae:79:
         a3:68:9e:0d:08:5f:c2:1f:7d:e4:c5:2c:4c:af:86:1c:57:cb:
         87:34:06:d6:31:ee:ab:d0:91:59:ea:27:b0:46:93:1a:59:8c:
         fa:e4:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org