Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa
File:                     2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa (raw, json)
Hash identifier:          Gypo4s4pKuGZYyt54mQ7gsMqGzLkmOl6JMDd5dPCoPk=
Subject key identifier:   16:17:0C:8B:F2:99:52:4F:E9:98:1C:1A:D9:5E:DD:28:EF:CE:BF:19
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F4328584785BBA641522AEA5AD6073280
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     134176
IP address blocks:        204.235.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a6:41:52:2a:ea:5a:d6:07:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=789c5cf7-3a5a-4ddc-9971-3fcfc95c4871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:82:7b:9d:dd:1b:c2:99:9c:d1:a1:ff:3e:41:
                    ee:48:53:84:e3:0a:0c:16:61:ed:bd:92:f4:42:3a:
                    9c:28:1a:5c:40:a6:1d:c3:3c:a4:56:33:d3:4f:48:
                    b1:f3:93:a5:11:65:9a:b0:d6:81:ed:30:f5:5e:70:
                    ca:50:66:71:78:14:14:91:75:99:f4:46:30:dc:a3:
                    71:72:d0:e7:7a:94:9f:48:2e:5f:97:bb:f4:9b:17:
                    84:ee:72:27:56:db:41:c7:49:cc:cb:9a:97:46:0c:
                    df:c7:d7:09:0f:40:29:c5:07:2c:06:5d:c8:56:e7:
                    e3:87:42:cc:81:a1:75:f7:ca:ec:2b:b7:52:eb:38:
                    99:31:c3:06:99:a1:a9:dd:6e:3d:ec:dc:12:5e:6c:
                    e0:0c:29:1d:73:84:0b:9a:3f:e0:99:a8:f3:a4:f1:
                    60:52:0a:3d:8f:d1:0a:40:6c:7c:4f:7c:17:8f:ab:
                    66:ec:31:63:14:35:f7:c5:1b:16:f6:78:58:55:2f:
                    19:ef:b6:95:fe:1d:93:c2:b5:91:e0:55:b4:0b:17:
                    d7:7a:43:46:be:05:4c:7d:b7:47:4b:fe:b3:90:83:
                    7a:69:56:6c:51:23:c6:be:83:22:35:a3:e8:10:c4:
                    0b:3b:9c:a8:85:28:72:93:ce:07:12:6c:a5:72:ba:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:0C:8B:F2:99:52:4F:E9:98:1C:1A:D9:5E:DD:28:EF:CE:BF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/2439b4f0-8a36-3c46-834f-6cdd5daa4795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:8d:75:bb:a3:b3:04:84:00:e2:c5:78:53:cd:7c:4b:44:
         dc:8b:c9:73:65:a9:e7:e3:42:5c:20:fa:27:3e:d8:d5:59:42:
         cc:a4:fa:ad:bb:58:98:8f:f2:a7:11:46:57:5b:57:c9:ba:d2:
         ff:31:83:a1:3f:bc:4b:18:e3:42:60:8b:1a:a5:4e:40:d6:17:
         f4:7c:a4:d4:1d:64:24:33:7c:01:bb:db:af:b9:2b:ec:a7:55:
         97:ea:ff:96:52:7a:ed:d0:4d:c9:91:a7:7a:28:f7:ef:e6:26:
         97:fe:d2:1b:9a:66:b1:9c:f1:b0:96:73:9d:b3:0e:76:05:66:
         a3:9e:f6:f9:b0:bc:58:4e:c2:c1:bb:98:36:19:ca:ab:a1:c4:
         51:93:eb:44:ab:b4:d1:13:b8:58:24:7a:e0:70:c1:d1:19:ed:
         88:be:ce:a0:e3:e4:78:15:23:c2:71:7e:08:0e:cc:0b:7d:04:
         12:e7:db:e9:bb:f9:e0:a8:7d:60:95:8a:00:0c:6f:b2:7f:fb:
         e4:f8:28:a7:86:30:c5:17:fa:a7:3c:bb:06:e8:b8:59:78:02:
         22:78:70:e8:94:63:03:26:98:5e:b4:04:92:43:f7:72:c5:0d:
         b8:db:13:b3:70:28:ff:d8:e7:39:fe:c6:b3:61:88:75:6f:7f:
         ac:c1:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:09 2024 by rpki-client on console-ams.rpki-client.org