Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/af7ea4e8-7a50-3343-9f45-61191658e8dd.roa
File:                     af7ea4e8-7a50-3343-9f45-61191658e8dd.roa (raw, json)
Hash identifier:          0FU7wjCgrdTftxVjODqQkD7sTL/1krberVc2wgf7yAc=
Subject key identifier:   75:8C:CC:1D:C4:63:6C:B7:94:C0:13:EE:2C:DB:4F:9D:F6:C6:8B:84
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285847A5D6A0E756A2EE472CCD2FC0
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/af7ea4e8-7a50-3343-9f45-61191658e8dd.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     26548
IP address blocks:        199.253.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a0:e7:56:a2:ee:47:2c:cd:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=13db634d-993d-4119-87c5-f0df968c631a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:c9:79:58:e0:5e:27:ff:7f:9e:57:1c:88:
                    00:d2:4b:c1:51:30:fe:94:68:31:db:46:e1:20:a8:
                    67:dc:80:23:8e:6a:95:2e:96:71:33:90:39:87:ce:
                    44:1a:10:34:09:54:86:f9:4a:74:84:7a:17:24:bd:
                    6d:78:a7:d7:ae:69:44:35:e7:71:01:3d:f9:b4:d8:
                    90:1c:cd:55:b9:be:c1:a3:7b:e6:36:fd:a7:27:e0:
                    21:c9:54:80:b0:e5:68:6b:b3:09:c7:d0:5a:2a:b8:
                    57:99:1e:ad:8a:23:9b:6c:c6:98:09:1c:02:20:44:
                    7e:37:25:9b:4c:40:74:d7:87:95:f8:f5:22:e2:b3:
                    41:5e:1d:99:eb:08:c5:43:e4:90:10:5c:ce:1c:1c:
                    b7:e5:28:0c:4a:07:37:d6:d4:59:19:b7:7b:d3:26:
                    e2:33:13:ae:56:cc:40:c6:51:08:a6:6a:30:73:3e:
                    78:2f:14:2b:99:c7:b7:3b:1f:53:60:1b:a9:c7:52:
                    9d:92:1f:0d:d2:f5:0f:55:fd:17:ed:d0:21:3f:50:
                    c5:77:5a:51:6c:d0:f7:64:43:a2:4c:8f:10:b1:f9:
                    03:21:37:19:ad:f8:49:50:33:e3:0b:40:47:66:a3:
                    aa:02:5b:76:33:79:c5:88:53:fb:1c:19:d6:8c:af:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:CC:1D:C4:63:6C:B7:94:C0:13:EE:2C:DB:4F:9D:F6:C6:8B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/af7ea4e8-7a50-3343-9f45-61191658e8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:6c:1e:7f:91:e8:51:44:f1:03:74:f1:d6:94:b6:31:1c:
         9b:34:2b:bf:2b:e1:f6:93:65:2b:7e:b6:c3:2f:a0:cb:da:bd:
         23:5e:d7:05:d9:8c:97:3a:94:c5:dd:a2:1e:6e:97:5f:2a:a4:
         b4:0f:3e:0b:da:61:66:f2:b3:c0:a3:35:4e:f7:42:dd:94:8e:
         0b:e1:ed:53:e3:14:2b:58:c6:2b:0e:28:30:15:46:0d:4c:64:
         9d:7e:af:31:70:5f:15:ad:b1:46:a2:48:4d:a5:63:49:b7:cd:
         33:65:81:5d:dd:19:67:a7:f0:8b:f1:94:48:f0:f5:b5:cf:88:
         08:bf:bc:af:45:3c:e5:96:fd:09:e3:2b:97:3d:52:5a:07:fc:
         9f:2d:f5:5d:84:a2:55:a2:1d:60:b1:b9:f5:4c:3f:bc:18:6e:
         7a:22:ba:f6:12:29:4b:7d:6f:a6:38:bb:17:56:2b:85:ca:0c:
         67:e1:95:50:b5:50:48:12:79:8f:6d:ad:07:46:3f:e4:c8:d7:
         c9:16:ec:e2:56:2d:65:24:3a:60:de:b0:49:70:e1:f8:23:77:
         c1:a8:bd:17:d1:50:3f:03:29:04:4b:4b:cf:7a:a8:9f:d4:6a:
         60:59:ad:ab:8a:42:a7:a4:7b:c6:f4:21:eb:61:a5:89:81:59:
         55:db:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org