Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa
File:                     ace4f36f-3b53-3796-be69-6548ad3e7057.roa (raw, json)
Hash identifier:          a2zR+fIK3V6OlyZ2fwwZ33Mh5GIp9PsK8kD4ZQ8KRo4=
Subject key identifier:   42:6E:0F:10:B5:52:B3:9B:60:6E:F4:89:D2:8E:B2:2F:83:46:43:BE
Certificate issuer:       /CN=d38fa32a-a6da-4615-8255-2c818c06ef15
Certificate serial:       010D0C9F43285847643B793DD09B05717DDA5DA0
Authority key identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     400817
IP address blocks:        204.107.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:79:3d:d0:9b:05:71:7d:da:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38fa32a-a6da-4615-8255-2c818c06ef15
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=d81a8a21-358a-4ccd-938c-cf2a0fa0f6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:b0:65:b8:1c:35:1a:0d:3e:7c:ce:9c:85:
                    85:6a:7c:6d:71:24:a1:f4:26:ed:ef:b0:59:06:db:
                    63:f2:ad:c2:40:41:bd:9a:49:8d:60:0d:5e:2d:c2:
                    68:5b:b6:f8:b1:04:8d:12:5f:a2:58:f9:b9:fc:9d:
                    6a:ed:7b:85:11:9c:7a:77:71:37:3e:fb:cc:6e:81:
                    e9:10:ad:2b:df:43:fc:3d:05:5e:dc:3a:68:25:76:
                    29:de:73:0b:86:80:8e:62:10:3e:68:84:0a:03:77:
                    7b:b4:63:c7:2e:0f:b9:5b:80:06:05:82:a9:ce:bb:
                    54:14:be:47:e1:04:1b:a0:f2:f1:91:0b:4d:fe:f2:
                    73:ed:8b:09:24:c5:36:5e:03:b6:25:de:58:66:e5:
                    0f:dd:70:aa:fb:cc:4e:c6:64:af:9b:92:c8:35:2e:
                    99:41:cf:a0:a5:d9:5f:b8:d1:19:6d:6d:50:66:41:
                    db:73:31:dc:55:84:b3:43:b1:c6:92:60:b1:8c:b7:
                    e2:8c:08:14:95:91:5d:cd:18:cc:85:e1:34:6e:71:
                    21:fd:88:39:4d:06:11:62:45:05:ed:4e:76:13:3c:
                    d8:31:98:74:f6:fc:71:48:70:a3:9b:4b:12:0d:1c:
                    81:d6:f6:8e:a5:f7:b0:4e:5e:4b:82:12:c4:0b:44:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6E:0F:10:B5:52:B3:9B:60:6E:F4:89:D2:8E:B2:2F:83:46:43:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.crl

            X509v3 Authority Key Identifier:
                keyid:B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:c4:92:d7:6a:fa:e7:d1:d3:38:09:e0:2c:2b:93:9d:05:dd:
         57:78:38:f2:6e:56:b2:fb:9c:2a:c0:5c:65:b1:8f:fd:e9:3b:
         ef:f9:37:6d:62:04:a2:a5:71:92:0e:c6:78:08:60:3e:24:5f:
         c8:cd:5c:0c:82:69:33:ff:61:cd:13:6a:02:21:f0:66:66:e0:
         d9:a1:32:df:6b:e8:ce:87:e8:36:94:12:aa:79:33:e4:f0:b6:
         89:e4:8f:73:19:18:9a:b9:66:36:db:0b:2b:b1:c7:75:08:e6:
         aa:2e:45:fd:8a:71:8f:2b:d9:e0:3e:eb:72:f4:60:a9:56:cd:
         5c:b2:38:f9:6c:d4:d1:aa:0d:7f:11:8e:1a:d8:6c:77:f2:e6:
         41:f6:f7:49:b3:8a:ce:ad:1a:d7:27:98:51:83:41:2a:5c:df:
         0c:dd:c9:b6:bf:94:75:a5:65:06:ad:e7:4e:a9:e6:d8:e5:62:
         64:f5:c4:12:24:e1:de:9c:18:7e:41:04:a7:53:b6:21:e6:63:
         78:c3:75:60:8b:69:f6:ed:c9:18:76:e8:2d:3f:98:90:58:df:
         e0:a2:21:24:41:7e:85:f8:50:29:68:85:bd:25:8b:97:cb:6f:
         23:2c:d5:55:d2:c8:48:d0:61:0b:19:8a:0e:b9:ce:20:4b:18:
         a2:b3:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org