Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
File:                     9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa (raw, json)
Hash identifier:          NpXYdYOjgr1XTEm9BkgHpahsuJXPuYS3AV8Z6Aog5go=
Subject key identifier:   D7:5D:F6:19:31:1E:CA:55:2B:AA:61:E7:5F:41:2C:33:2E:16:D9:8D
Certificate issuer:       /CN=5e4e9a46-06dc-462d-a10c-710a3c461796
Certificate serial:       010D0C9F43285847CD09F4221DCC19888E16B880
Authority key identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     237
IP address blocks:        192.88.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f4:22:1d:cc:19:88:8e:16:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4e9a46-06dc-462d-a10c-710a3c461796
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=9fbbf3f6-114c-4dab-a856-5e975588e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:eb:80:da:8b:ff:c5:ae:f6:15:b7:0a:3b:
                    02:62:de:72:26:57:9b:48:1c:d3:54:20:a7:17:65:
                    32:69:7e:50:98:dd:5d:0b:83:fa:9f:05:d3:e7:e9:
                    36:5e:84:c1:20:2d:ca:f2:01:24:c4:aa:03:30:3e:
                    14:7a:73:f1:63:0a:23:5a:39:70:c0:0c:97:8e:aa:
                    ba:5b:ee:1f:5c:47:6c:86:60:50:9e:7f:b0:62:8a:
                    ef:94:02:4a:81:66:84:8b:41:23:98:a4:b8:b5:6f:
                    2f:66:bb:cd:0f:5d:26:19:b5:74:4b:a8:9e:e2:3e:
                    ff:64:92:47:54:fa:21:9a:a0:a9:7c:3f:7d:35:3f:
                    30:2c:70:b7:60:b8:aa:c9:d4:03:a9:67:22:d3:52:
                    58:21:d2:89:53:1e:47:21:45:b6:9c:6c:5a:6c:69:
                    2e:70:cd:5a:2b:d8:f2:f0:cc:42:9f:5d:49:4d:db:
                    54:70:3d:2b:02:f7:b7:6b:d3:d8:26:3d:7f:51:e3:
                    db:4c:d2:de:6a:76:39:9f:3d:f5:0a:fd:34:d0:44:
                    56:52:95:35:5b:44:0e:56:2b:6c:ba:8f:88:6a:c5:
                    27:40:02:67:ea:f8:e2:e6:d4:7e:77:16:7a:63:8b:
                    c2:c5:c9:cd:70:57:b6:06:86:cb:9d:d3:bc:fc:4e:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5D:F6:19:31:1E:CA:55:2B:AA:61:E7:5F:41:2C:33:2E:16:D9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl

            X509v3 Authority Key Identifier:
                keyid:7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:b6:36:6e:8a:7f:b3:d3:69:f1:56:fb:76:0c:a8:9f:32:
         e2:09:72:32:15:88:09:91:5b:bb:ce:2b:6c:5f:19:43:7f:eb:
         b4:18:da:65:1f:03:0a:7c:7d:5c:f0:95:82:2c:f0:97:2d:52:
         f3:e2:75:39:aa:46:7f:9d:3b:13:67:79:46:a2:4f:39:5a:cc:
         38:92:58:7a:10:0f:0f:c4:90:6e:6d:73:64:da:1b:26:d8:91:
         63:c0:d3:f4:75:37:f6:94:08:7e:87:c1:5b:93:a1:3c:17:77:
         97:78:c2:cc:67:cf:2f:79:d9:75:83:c9:0b:27:c9:17:e7:f3:
         be:f5:b3:20:ec:fe:0b:e7:6a:8d:67:45:8a:ce:bb:28:15:cd:
         7a:ca:3d:fa:80:15:8d:31:15:32:51:95:08:9d:02:04:8e:20:
         dc:e2:e1:16:d3:89:50:16:13:cc:e8:9d:6c:97:f4:e8:c4:b6:
         17:98:62:c7:2c:ec:62:83:c8:9e:10:b4:98:df:c7:c6:9e:d7:
         51:71:d7:13:d5:66:44:7a:15:3a:b8:54:a3:36:d8:f4:3a:9a:
         a6:e6:09:46:ee:52:bc:b0:a1:d0:52:d3:17:78:d7:79:97:2a:
         ca:b9:1b:62:40:98:b1:11:5a:45:0f:20:db:dd:cb:36:4a:87:
         d6:8b:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:32 2024 by rpki-client on console-ams.rpki-client.org