Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
File:                     2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa (raw, json)
Hash identifier:          7/vk6glzmBoGiGyZsHNby0cpWWnRkDiPhf0BDe1Ox0c=
Subject key identifier:   F3:5A:AC:FD:27:9A:C0:D1:9B:DD:23:AA:E0:33:C7:05:9D:E2:A7:D6
Certificate issuer:       /CN=261c40d7-8712-472b-8c28-a09b3f549365
Certificate serial:       010D0C9F43285847643B6DE42402D9FEADC6A0F0
Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     32564
IP address blocks:        142.216.174.0/24 maxlen: 24
                          205.210.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:6d:e4:24:02:d9:fe:ad:c6:a0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=fb5de8a7-6dc7-4fe7-9763-195b41463c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:1f:77:b8:79:62:0f:d6:d2:9e:74:c8:89:
                    4f:c5:b8:8c:be:ab:13:42:44:f2:2a:de:94:8f:de:
                    94:c7:24:30:46:21:d3:75:c0:7e:e8:d1:df:3f:f4:
                    c1:3e:c5:a1:db:ac:40:ad:a7:aa:c3:f2:0b:40:ca:
                    34:e5:66:6b:2c:9b:29:15:f6:08:3e:32:56:9b:d6:
                    a6:f3:27:8f:81:9f:1f:56:68:1d:e7:a0:29:f7:73:
                    6d:10:95:8e:1b:f3:68:a1:2e:a0:16:90:80:b4:9f:
                    db:86:da:81:3e:7d:63:da:9a:b2:97:b8:d0:05:4e:
                    09:01:1f:bd:96:44:95:ba:2b:c5:bc:90:f7:f3:9f:
                    3e:63:76:dd:74:29:91:5c:ba:a1:7a:e3:48:c4:9e:
                    51:28:cd:93:bf:84:8d:a9:cd:1a:48:c3:36:5f:d6:
                    d5:c3:38:1d:a2:a0:9a:07:2b:28:ef:cb:62:f4:09:
                    95:c9:41:57:d6:dc:29:2e:74:68:16:1b:7b:97:4a:
                    5e:ab:fd:12:aa:e1:fe:df:41:1d:86:ab:d2:3f:1e:
                    c0:e6:16:70:f4:0f:c1:52:dd:61:8d:f6:ee:71:b9:
                    f7:f3:67:7f:ee:46:36:a9:ce:ed:bb:69:02:2d:1f:
                    a7:07:ed:54:9b:c0:fa:72:50:3b:ef:eb:95:ab:67:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:AC:FD:27:9A:C0:D1:9B:DD:23:AA:E0:33:C7:05:9D:E2:A7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.216.174.0/24
                  205.210.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:77:ca:47:06:b7:8b:57:2c:aa:c4:49:30:4f:61:d5:71:
         59:38:25:32:36:ec:53:d6:59:66:b0:0e:b3:7c:05:0b:07:54:
         3e:93:ac:f6:22:00:b4:94:9a:2d:3d:6a:8b:75:e4:24:62:5c:
         40:82:e2:3e:71:49:86:b6:7d:b8:4f:0a:00:b9:f2:ff:23:e3:
         dc:18:e6:78:39:81:9e:00:92:93:14:d9:0a:47:37:05:31:43:
         da:a9:d6:a9:3d:56:29:1b:25:7e:00:e6:10:1b:7b:1d:00:d7:
         32:d1:9d:57:53:7b:1f:1b:72:a5:6a:a3:b0:37:59:aa:f1:a1:
         60:c0:15:f2:a3:62:ef:c4:2b:ef:9b:b4:30:97:72:e9:ac:0e:
         80:04:5c:57:82:85:9f:2a:e0:92:33:76:34:a8:ef:5a:f2:53:
         ba:d1:bb:1b:b1:e0:79:1e:8c:a9:4d:50:33:1e:11:64:4d:c5:
         76:2b:ac:b8:c8:93:5d:d1:a8:ee:1c:41:c1:fd:8f:9b:b4:62:
         24:77:34:83:e9:70:99:52:f0:17:cd:f3:24:c0:a9:5c:b8:10:
         06:b5:53:19:7d:fd:2a:d5:b2:5f:9a:34:b1:1b:da:0a:6b:02:
         28:fa:96:bb:30:e5:b1:f5:f7:72:7a:c0:7f:fb:17:0d:79:31:
         df:ad:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org