Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
File:                     4847252c-0d24-3537-a84b-ad62cb2938b3.roa (raw, json)
Hash identifier:          tCkS6a+yEBZV4WEx6p07tyajxX+CxseN2Vr7GEYw2sg=
Subject key identifier:   E2:32:6B:DD:6E:BC:3E:D3:5A:05:64:3F:E6:E2:50:BB:31:09:42:A4
Certificate issuer:       /CN=24c594b2-08c8-4864-afae-a607d79beb73
Certificate serial:       010D0C9F4328584793B11337784DC59EBC3D3BC0
Authority key identifier: 82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     398178
IP address blocks:        138.43.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:13:37:78:4d:c5:9e:bc:3d:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c594b2-08c8-4864-afae-a607d79beb73
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=c3410637-3c92-46a9-acb2-184a6fa21ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:dc:b3:3e:b8:81:5b:ee:d0:5b:ac:8b:c0:
                    c1:73:22:34:54:57:c0:b0:a9:24:6e:54:5d:e3:d9:
                    4c:2c:82:65:dd:38:db:fc:d0:95:78:f9:ce:5e:d3:
                    fe:df:78:74:7d:6e:eb:43:f4:3f:e6:45:dd:63:15:
                    b4:af:9d:12:bb:a3:cc:7b:f0:ab:7e:31:a1:b3:b9:
                    68:fa:c8:73:a3:57:1c:d5:1e:b9:00:da:55:c2:41:
                    78:39:da:e4:a6:97:a6:52:81:2d:5d:3d:f1:db:65:
                    4a:b0:8e:8b:91:ca:70:e5:22:02:82:55:2c:fd:99:
                    1b:85:22:aa:84:5a:2b:c3:b3:4b:37:17:51:11:62:
                    3d:b0:c9:80:34:e5:d2:55:e4:13:1c:1f:d3:92:55:
                    b0:66:60:43:b0:c8:50:00:3d:ee:db:23:61:c0:a3:
                    65:1d:42:4a:a0:57:76:56:62:44:7d:d5:53:7b:fe:
                    dd:49:61:4a:f4:ad:3e:38:53:2c:a1:9e:d2:8a:9f:
                    de:82:e9:7c:12:95:49:ca:59:4f:ec:42:1d:86:a8:
                    56:69:57:18:b0:72:61:ea:ea:5f:cf:95:1b:09:51:
                    0b:7c:64:bb:c6:9a:c6:1b:21:08:82:f5:97:7f:0d:
                    38:2b:d3:f1:42:e1:b5:9a:c5:db:0a:8d:6b:57:ae:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:6B:DD:6E:BC:3E:D3:5A:05:64:3F:E6:E2:50:BB:31:09:42:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/4847252c-0d24-3537-a84b-ad62cb2938b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73/24c594b2-08c8-4864-afae-a607d79beb73.crl

            X509v3 Authority Key Identifier:
                keyid:82:87:85:2A:0A:F8:0A:4E:29:3F:AC:1A:62:02:E4:4F:A8:EC:30:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24c594b2-08c8-4864-afae-a607d79beb73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:7f:12:2e:2d:f0:7c:98:38:8d:25:f4:3e:d0:9e:ed:4e:
         58:1b:77:69:dc:64:a6:cd:90:de:e6:7c:32:eb:30:8e:5a:71:
         b7:02:ee:17:5c:f6:91:ac:71:b7:6e:4c:1f:ec:bb:4a:98:a2:
         87:29:62:88:78:2a:0c:a7:d7:78:bb:44:cf:f0:43:12:63:2b:
         54:20:58:88:0a:f1:a4:26:9a:a0:b1:53:b5:4d:6f:a4:86:ad:
         f7:4f:ae:ab:d8:19:cd:80:a9:10:0b:d5:53:56:c2:11:20:b7:
         9f:5f:f4:12:15:52:70:fc:b7:f0:b1:56:c7:7f:77:a2:8c:57:
         22:96:9d:10:60:40:7f:98:79:e0:7e:2e:dd:65:91:69:70:73:
         6f:61:a0:c7:0a:1a:fa:57:4d:1a:57:aa:5e:40:c8:aa:7c:bf:
         19:53:62:3a:87:47:37:db:b4:0c:3d:7d:84:72:53:a2:76:24:
         d1:25:85:ef:36:5a:84:ea:0e:09:27:67:31:18:34:99:dd:8a:
         b5:e4:b2:3b:4f:76:46:f2:96:76:e9:74:63:ea:ee:94:d7:27:
         50:b0:a7:89:51:b2:dd:6c:eb:81:18:e4:76:c4:cf:8b:8d:95:
         20:6c:d6:f9:c0:21:69:31:0c:1b:ef:a4:83:06:b4:6d:95:1e:
         16:a4:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org