Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fc2d5920-ae69-3a38-bb75-2cd8e330a7fb.roa
File:                     fc2d5920-ae69-3a38-bb75-2cd8e330a7fb.roa (raw, json)
Hash identifier:          Z5rq7IHsWr82DD3E40U/2uA5+lMP740/a2uYSejtwVI=
Subject key identifier:   92:F0:36:3F:65:E6:3B:D4:97:4A:41:45:62:AF:50:C3:0D:DF:21:71
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858474DE5FB2C6E203AE956970E80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fc2d5920-ae69-3a38-bb75-2cd8e330a7fb.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     135377
IP address blocks:        128.1.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fb:2c:6e:20:3a:e9:56:97:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=0c3fbeb1-dbf8-4ad6-8052-92da14546aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:e6:2b:3e:d3:41:5c:32:42:e6:0c:29:7a:
                    56:4e:c9:12:55:33:4d:38:5d:f6:26:a5:73:dd:94:
                    89:62:c6:4b:6c:74:4b:40:96:82:aa:d3:94:27:45:
                    91:82:60:59:79:08:c4:c2:0f:6e:06:7d:40:a2:68:
                    52:b3:d3:96:49:26:21:a7:94:13:1f:13:58:32:64:
                    c3:8b:ca:b7:37:19:70:bf:d3:33:bb:c6:42:77:ec:
                    5b:9c:1a:36:7d:19:13:b0:5e:ae:60:ac:08:01:11:
                    34:cf:16:2e:2c:e1:dd:0c:e2:12:6b:9b:10:69:4e:
                    01:4a:25:49:dd:e2:79:07:e4:64:f6:8c:54:83:55:
                    01:f7:38:5e:63:13:5c:34:b3:a4:a0:91:20:6a:a6:
                    97:ea:0a:8b:f6:0c:3f:12:82:3e:64:3f:2e:4d:0d:
                    4a:62:56:ff:3c:41:6d:80:22:ad:ab:5a:4a:0b:ff:
                    ad:5e:f6:89:45:81:99:d5:37:4c:67:98:da:9c:05:
                    66:49:d4:74:b6:95:46:7d:d3:83:36:d3:15:5d:f8:
                    9d:c3:62:dc:ec:90:ef:1f:50:58:ce:51:78:9c:f9:
                    af:0f:53:a5:ee:b8:81:bf:99:26:a7:9e:83:13:f3:
                    a5:0d:29:5d:71:01:23:0a:f4:d7:68:b5:ad:0f:5f:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:36:3F:65:E6:3B:D4:97:4A:41:45:62:AF:50:C3:0D:DF:21:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fc2d5920-ae69-3a38-bb75-2cd8e330a7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:84:27:5c:ba:b1:fb:96:8b:47:b4:e6:0f:74:4f:83:a6:a6:
         fd:ec:e8:15:65:fb:e4:74:f5:d3:73:e4:a9:67:89:15:dd:c6:
         8a:35:95:02:2d:2c:d0:dc:f5:cf:2d:df:f9:f8:11:72:f5:49:
         aa:66:b8:98:ea:59:dc:ba:27:4a:e4:c0:60:4e:91:bd:b7:1e:
         92:2d:4b:2a:fa:23:17:fa:b6:dd:2d:79:c7:70:b0:6a:6f:6e:
         11:de:3a:9f:97:cf:44:e4:39:02:37:ef:7e:74:8e:e1:dd:1d:
         54:b0:99:a8:a0:f4:2e:a4:49:70:f1:f3:f1:dc:cc:cc:c6:2c:
         6a:38:89:1f:29:88:dc:fa:b0:9b:8e:67:bc:c8:2d:4e:05:de:
         7b:98:5a:6b:25:c8:19:20:06:c7:95:33:3c:a8:69:99:be:28:
         83:b7:23:f4:df:e8:50:21:16:d7:78:9f:08:fc:eb:d9:93:b3:
         18:0e:71:63:96:4b:62:ad:e6:87:7b:6f:ac:15:12:41:4e:18:
         74:2e:73:79:46:c9:85:02:b7:14:85:cf:57:47:84:3d:0b:a2:
         4e:03:3e:94:11:20:aa:7a:43:f0:f8:bc:e1:70:e9:7c:24:93:
         12:5a:23:e9:11:a5:64:ff:c8:9e:6c:3a:c6:9a:e2:13:f2:de:
         dc:04:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:29 2024 by rpki-client on console-fra.rpki-client.org