Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa
File:                     754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa (raw, json)
Hash identifier:          9DoZedt5aLIEZCzxwwWVnoWVTO4wI6M2YdmGWtJ8AUw=
Subject key identifier:   98:38:B7:CB:48:52:94:5C:D2:57:A1:06:AD:87:8D:F0:D2:43:14:A4
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584731FB99F836F47F446AAD7D00
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     8002
IP address blocks:        207.251.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:99:f8:36:f4:7f:44:6a:ad:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=2f205e0f-c7ef-4c85-ae41-bef7dd1256de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:aa:b3:c3:f0:45:9c:4f:24:c4:2e:cb:91:
                    37:dd:b7:a4:cd:03:34:92:50:e9:d1:1f:5f:6e:d9:
                    f7:5a:23:43:0d:72:66:6b:12:2c:6f:83:21:a9:d0:
                    2f:d0:af:61:d8:69:04:9d:18:d1:ed:e1:17:c9:ca:
                    76:59:df:8e:3a:ef:2b:6b:64:b8:1e:dc:a2:de:f7:
                    32:0f:20:7c:89:6e:8a:8c:8a:1c:b7:85:be:01:b2:
                    d0:59:88:5d:3b:b2:80:eb:01:96:3c:ee:37:65:46:
                    84:b9:77:b8:78:2a:ea:65:69:6d:0d:dc:b8:cd:8d:
                    e3:1a:c7:2d:e5:c4:38:5c:a1:e6:9d:5c:c6:3e:d5:
                    c2:34:51:cd:38:fb:9c:58:cc:ee:e6:f6:50:48:bd:
                    73:33:35:b0:ad:cc:e7:11:f3:8f:9b:77:a7:09:0c:
                    6b:ad:ee:a0:27:27:b4:ca:44:2a:12:9d:76:83:4e:
                    49:60:c3:cc:bf:0e:c0:5d:ba:24:5e:ab:ff:aa:d5:
                    bb:85:cd:97:86:31:b7:61:5a:db:bd:41:58:73:a4:
                    41:2f:42:8f:05:b5:e0:57:35:12:98:f8:fa:bd:5d:
                    33:ca:02:3c:58:63:45:66:3e:d5:61:de:91:c4:a2:
                    3a:53:72:14:4b:b0:6b:16:6b:bb:c5:85:3f:7d:81:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:B7:CB:48:52:94:5C:D2:57:A1:06:AD:87:8D:F0:D2:43:14:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:7d:c8:55:81:6e:da:87:8d:fe:b9:a6:aa:c9:97:0e:45:
         3b:44:db:c0:1a:0f:cc:ff:71:c9:23:9c:eb:4d:b6:80:ef:34:
         aa:fc:b5:0d:3f:53:43:7e:99:e2:b0:1a:71:44:0c:ac:63:c7:
         39:3e:ea:10:0f:0e:b0:0a:0e:68:14:49:a8:66:0b:a1:1e:e0:
         14:b5:c3:ef:c7:18:3d:b6:57:4d:c9:c8:24:23:fb:20:64:66:
         19:f2:fb:7b:8e:46:de:64:ca:31:8b:da:64:77:29:53:dd:b0:
         fe:cd:b3:65:24:3c:1a:18:ea:f9:49:4e:c4:2d:52:58:c1:5b:
         c6:37:80:ae:2e:69:ce:cf:56:4d:1b:3a:6b:68:38:93:c6:de:
         c1:26:db:97:95:75:5e:18:52:4e:72:87:c5:cc:79:53:04:30:
         99:5d:69:ef:fb:8e:00:e8:65:c7:5b:49:9c:d8:6c:4d:e4:86:
         35:82:49:8e:2e:c5:22:ce:26:69:b7:b4:d3:6b:6d:95:c0:1f:
         83:45:d8:39:4f:be:ec:cb:e7:08:ca:f2:47:43:3f:bd:6a:33:
         f2:45:6f:51:4d:71:ef:61:6c:b5:b6:9f:cf:2f:33:9f:fc:ab:
         96:50:ea:70:09:dc:3c:a5:c6:cd:7d:8f:7f:a1:1f:74:2f:c3:
         14:23:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org