Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f7e21cdf-c27b-3fd9-ae2e-d26cce57ebc8.roa
File:                     f7e21cdf-c27b-3fd9-ae2e-d26cce57ebc8.roa (raw, json)
Hash identifier:          sd06WmepsS0JQ1AUpM+uxv9UFHtRdD3U+gI1r0B+nKk=
Subject key identifier:   CE:57:A8:5E:1E:3F:F1:48:31:3F:2D:65:CE:0F:AA:19:C2:10:4C:AE
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858471C8CED92765DAC915032ECC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f7e21cdf-c27b-3fd9-ae2e-d26cce57ebc8.roa
Signing time:             Thu 05 Sep 2024 08:46:32 +0000
ROA not before:           Thu 05 Sep 2024 08:46:32 +0000
ROA not after:            Wed 04 Dec 2024 09:46:32 +0000
asID:                     62610
IP address blocks:        128.1.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1c:8c:ed:92:76:5d:ac:91:50:32:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 08:46:32 2024 GMT
            Not After : Dec  4 09:46:32 2024 GMT
        Subject: CN=6a2fb0e2-d9a9-4a30-b300-3643bab8c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:d6:ed:d9:df:8f:25:5c:93:e0:31:7e:59:
                    c9:55:de:ef:52:e1:af:d3:0c:a3:04:20:ed:cd:eb:
                    96:cf:5f:49:a0:bd:77:25:35:b5:aa:eb:89:32:dd:
                    2d:77:bc:31:9d:17:73:b9:f8:4c:c9:da:c3:25:df:
                    04:a6:2d:fd:94:eb:3f:ae:70:e2:13:fc:f6:22:e6:
                    7b:39:0d:93:12:02:c6:15:a6:8a:ed:95:01:dc:9d:
                    21:8f:38:1e:36:b6:90:d5:cb:8b:a8:c6:49:d3:6d:
                    da:63:b7:ce:91:fd:7c:05:5b:98:d0:e3:1b:31:d3:
                    14:f0:33:61:98:6a:61:77:ff:3d:f8:80:88:a0:b6:
                    a7:cd:cc:a5:51:69:80:62:fb:d0:b2:6a:48:d1:7d:
                    be:19:76:42:48:83:d3:b7:70:42:1f:e5:01:fc:86:
                    f1:8a:c3:63:52:b7:d2:8d:e5:60:60:b6:61:52:5a:
                    10:0b:c3:b8:b4:3b:26:06:89:03:dd:d9:36:c0:99:
                    b4:d6:30:f7:1b:54:ab:e4:fd:94:35:54:46:1e:95:
                    41:2e:63:39:60:93:50:04:3b:f2:84:3c:c7:a1:3e:
                    bb:3e:a7:85:a3:d2:06:b2:df:f9:22:ec:10:67:45:
                    aa:2e:57:eb:09:32:b3:6d:9b:68:4b:3f:9c:4b:31:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:57:A8:5E:1E:3F:F1:48:31:3F:2D:65:CE:0F:AA:19:C2:10:4C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f7e21cdf-c27b-3fd9-ae2e-d26cce57ebc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:2d:45:e8:97:61:9a:be:a2:ef:0d:4d:3a:bd:43:57:e7:48:
         2b:ff:1e:89:1b:69:7a:ba:51:72:51:30:20:0a:9c:7c:62:57:
         a0:75:24:6a:6b:e2:98:75:0f:87:20:ea:44:c5:aa:39:03:e9:
         94:72:5e:16:31:43:6f:cd:e1:e4:1f:28:22:d5:91:d0:e3:ab:
         08:34:55:f8:33:f4:8d:bf:4c:e2:19:95:92:2a:2b:5e:5f:2b:
         09:c4:27:4f:3f:44:89:0e:fd:a5:9b:47:04:2f:cf:2e:e0:a8:
         8f:21:2f:49:de:d0:03:27:2a:6c:db:aa:f7:8b:37:87:be:4d:
         d6:2d:62:1a:05:8d:51:f5:ad:a9:c7:72:72:18:f6:3b:5f:9e:
         8b:ea:22:5b:2d:f1:30:fe:87:f7:d8:94:9d:9a:4c:e8:ed:f1:
         6f:9f:4c:3f:c4:b6:f9:1f:38:dc:ed:6c:77:51:9e:84:2f:6d:
         16:7c:60:37:73:e0:0b:e5:59:2d:74:26:2a:46:a8:ac:45:67:
         04:2d:07:08:2f:6e:37:f2:9e:d8:89:dd:22:68:f4:11:39:48:
         06:f7:54:c7:0f:51:4b:7a:12:d0:90:c2:f7:f2:5e:78:9b:5f:
         63:f4:79:7d:4e:52:a6:45:a0:b8:81:8b:d4:cf:ea:16:8c:f4:
         04:28:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:29 2024 by rpki-client on console-fra.rpki-client.org