Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa
File:                     79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa (raw, json)
Hash identifier:          FrGueBfMIUC2aJiio9IF5igJ2s8w3+L+2Uw/JN6uZ0o=
Subject key identifier:   7A:E9:D1:6F:F7:31:47:CD:BB:0B:FD:DB:21:45:82:E9:BF:AF:05:47
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F432858473E206799975272CF27D07000
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa
Signing time:             Tue 17 Sep 2024 09:25:22 +0000
ROA not before:           Tue 17 Sep 2024 09:25:22 +0000
ROA not after:            Mon 16 Dec 2024 10:25:22 +0000
asID:                     16509
IP address blocks:        204.79.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:20:67:99:97:52:72:cf:27:d0:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Sep 17 09:25:22 2024 GMT
            Not After : Dec 16 10:25:22 2024 GMT
        Subject: CN=c91f9ac8-c696-4a8d-b4d1-60463dffeb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fa:17:28:dc:64:66:f1:0a:35:85:19:eb:fd:
                    e7:ed:7d:c2:bb:4e:8d:09:6d:2a:d0:67:5c:a5:4c:
                    58:82:b2:c3:9e:e0:6a:16:fe:f6:e3:88:69:65:93:
                    76:24:4b:e7:f7:09:f5:36:f3:c3:8e:9c:b6:5a:cf:
                    93:9a:cf:2d:4e:51:96:36:bb:2c:e3:50:1e:0e:c7:
                    ab:56:6c:c9:bc:15:ab:17:4c:98:5c:24:d3:c6:46:
                    c8:a3:51:3b:b7:75:0f:a1:8c:bd:86:e9:7f:69:48:
                    8d:d0:2e:80:6f:a4:de:5a:1a:09:98:f7:22:89:d5:
                    5a:2e:98:9b:41:9d:86:59:e1:4e:aa:9c:bb:d5:49:
                    d0:dd:bd:a0:58:b1:c3:96:49:4f:07:08:d2:41:6f:
                    df:98:d3:fc:91:b3:ba:3c:2d:a4:3b:e7:9b:ea:9a:
                    f5:cb:bd:10:eb:d8:dc:6c:a9:c0:73:41:24:66:16:
                    57:88:8f:9d:50:83:ff:1f:57:9a:1a:22:24:15:c1:
                    d7:86:5c:3e:e7:2a:c1:ee:52:43:c4:f9:d0:30:e5:
                    12:58:2b:3c:d3:83:d6:7a:80:5c:db:29:b4:21:b7:
                    43:74:3a:3e:d0:1c:95:82:6b:06:1a:db:82:f8:f4:
                    1b:fd:4e:44:56:73:3c:b8:0b:d2:bc:d2:c1:15:b9:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:D1:6F:F7:31:47:CD:BB:0B:FD:DB:21:45:82:E9:BF:AF:05:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:9d:52:28:cf:08:88:b5:de:d1:3e:de:88:ff:a3:ad:49:
         d2:13:bc:67:0a:7e:70:06:68:66:54:b1:97:bf:01:66:50:f0:
         a3:9b:df:bd:db:1c:b7:51:d7:66:4c:ee:3e:f5:b7:d5:b8:6f:
         df:49:66:01:ce:89:88:b1:ad:cf:82:4b:c1:0f:63:37:2d:4d:
         57:61:5f:f0:98:03:18:0b:fc:6b:e2:a6:3e:b8:92:07:76:82:
         df:34:22:49:6c:93:a6:cf:c1:ad:d0:d9:56:08:d5:94:6b:91:
         e0:a6:4c:d1:87:67:cf:b9:a1:90:05:db:8a:53:96:f5:dc:de:
         05:04:64:6e:79:bd:c1:93:d8:56:b5:30:66:d8:a2:8e:7f:67:
         a7:02:1b:1c:3b:0f:97:f1:3a:6b:bb:70:75:f8:ff:00:dd:f6:
         cb:64:22:34:8e:a7:58:85:90:bb:b7:fe:fb:97:01:2b:2f:16:
         00:36:33:46:49:b3:85:1c:79:e2:4e:33:95:00:a6:11:6d:31:
         d2:66:46:e2:dc:25:18:9f:89:f8:01:04:b8:f6:79:7c:8e:33:
         b4:e0:b8:b7:50:31:59:95:18:81:76:ec:20:2a:35:f2:e5:8b:
         0a:31:58:ea:41:b1:e5:bf:85:a1:cf:59:b3:d2:ea:ad:dc:a2:
         82:a4:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org