Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa
File:                     c031494b-b640-34ed-acb0-5dd20f5c3374.roa (raw, json)
Hash identifier:          eUAI2WwkvLh201+gHkdzU/r8YiDmQQilre1nYGC/ibI=
Subject key identifier:   4A:BC:12:14:C3:F7:A1:C5:DB:ED:74:5D:CA:8F:D6:85:F0:EF:09:3E
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584722A0769AED4A968A59FE2840
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     397041
IP address blocks:        134.195.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:76:9a:ed:4a:96:8a:59:fe:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ad62f71a-f605-4f00-83eb-ac7e012be0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:fb:fa:55:77:54:60:c1:01:5f:fa:f4:0c:
                    00:ee:e4:5c:8a:b6:57:92:1f:e9:72:ec:6f:e7:4f:
                    57:fa:86:45:5a:9e:85:4f:86:88:84:21:00:cc:c3:
                    e0:55:20:2b:f7:31:f8:5c:7b:4d:00:cf:0a:d8:54:
                    0a:e8:d6:39:dc:58:66:40:3b:bd:21:50:0a:36:4f:
                    19:e5:e3:29:42:29:19:83:42:d0:e1:44:e7:7d:3d:
                    88:06:e8:f4:7a:1b:71:7e:02:1a:e2:f6:6c:d1:40:
                    67:4f:21:9d:7e:98:a5:71:3d:0f:cf:27:6b:78:ce:
                    0e:a5:cb:0b:03:29:57:42:01:89:60:b0:d5:a4:79:
                    97:2e:13:79:5c:87:16:94:74:42:b5:79:6e:12:64:
                    ca:d5:c8:4b:08:16:08:3b:68:bd:e9:ef:9b:22:70:
                    a5:c9:8e:43:b7:cc:dc:9d:91:ac:95:a4:30:53:2b:
                    b3:83:96:5e:78:1a:a0:ec:d2:6f:81:48:a2:65:6f:
                    97:04:d0:8f:37:c1:55:4b:d6:66:9e:63:6c:b6:83:
                    4b:35:d0:09:03:04:56:04:fb:52:d2:8b:d7:56:88:
                    63:3b:f8:2f:e0:6e:41:6e:6f:6f:2d:e7:d5:93:80:
                    ff:11:e8:65:11:f0:09:20:55:ad:f1:38:2c:55:e0:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BC:12:14:C3:F7:A1:C5:DB:ED:74:5D:CA:8F:D6:85:F0:EF:09:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:53:4a:d0:83:75:ae:59:b3:84:c5:b9:c6:56:bc:06:5f:
         bd:1d:ea:68:9c:b9:da:f5:54:9e:17:75:57:91:fd:9c:d8:eb:
         43:71:dc:a4:ab:c7:d4:db:1e:93:a2:46:2a:9c:a2:f2:2f:5a:
         fb:ff:31:be:97:b0:e8:af:11:46:6e:bb:be:66:20:56:90:a2:
         9d:d8:a3:34:5e:8f:21:71:47:84:46:23:61:d6:db:fe:a3:11:
         7b:90:a0:1a:2a:87:4d:4e:36:ad:16:06:2f:00:9d:a0:4b:c3:
         73:f0:20:6b:8d:f2:57:68:28:bd:6f:29:e8:ff:00:20:f6:5a:
         3a:c8:6e:34:7c:cd:03:5f:4e:a5:98:e3:fa:fa:76:a1:e4:61:
         a2:ba:13:d7:4b:34:78:12:a9:dd:92:7d:6f:52:cf:ca:8f:bf:
         78:18:91:1c:fe:d6:62:c5:0a:4d:d2:be:b8:2a:dd:4f:f4:5b:
         62:50:f1:73:77:a0:21:9e:03:26:0b:a1:70:62:c0:18:7c:fb:
         5e:97:94:08:c9:84:db:79:96:ba:68:e3:77:be:52:d1:47:a8:
         ed:d6:1c:28:6e:03:00:db:a6:fc:13:6c:d6:7a:18:e1:1f:24:
         57:09:98:20:e0:da:df:dd:b1:f9:3c:b0:5a:ab:61:fd:18:95:
         05:1a:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org