Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa
File:                     3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa (raw, json)
Hash identifier:          maFEllKG/S4o7payIZzcXhNjY0lTtDqXIkt8n8TdP08=
Subject key identifier:   EB:9F:1C:EC:EF:63:91:5C:CF:13:E2:67:32:B6:5F:05:AA:70:52:80
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847CA3F7AA1B537F7C828B89F40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     36000
IP address blocks:        209.53.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7a:a1:b5:37:f7:c8:28:b8:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=25102f89-0672-4514-9211-2a53a321095f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:9d:70:d1:94:c7:9b:69:9f:85:83:4f:17:
                    a6:c0:04:b7:0c:9f:2a:23:1b:96:3e:01:0b:0e:b3:
                    00:e7:46:a1:cd:4e:17:1d:a7:be:3d:1a:49:4b:43:
                    c0:4d:bb:cd:3c:e7:d1:ab:88:9f:65:0b:b4:6d:4e:
                    16:b9:e1:65:1e:94:c4:72:e4:79:22:b5:2c:10:33:
                    91:eb:7b:80:54:34:ab:3b:d1:e4:93:48:21:fe:ac:
                    b1:dc:03:80:e5:65:42:e1:60:6f:70:8a:80:82:d1:
                    41:62:9e:79:39:9b:9f:88:03:42:98:a2:e8:47:af:
                    3e:3c:b4:dc:cc:5d:6d:1c:44:b1:8d:88:1f:a5:6a:
                    4b:bc:b0:83:d2:b1:8f:71:08:b5:79:aa:5f:83:3e:
                    f9:22:83:c1:5e:47:7f:d3:c6:3b:b5:ce:83:0c:ec:
                    4c:c9:77:0b:80:e1:3e:47:8b:89:b6:d6:b9:04:60:
                    aa:dc:8c:70:10:36:6b:b6:0c:61:13:66:f5:54:1d:
                    85:30:97:e7:12:a7:69:dc:b3:1d:a2:3d:3c:00:f9:
                    28:76:86:70:67:8e:0c:0d:e0:f7:b2:60:c3:29:aa:
                    8d:dc:53:9c:6e:3d:d0:28:e7:45:99:36:02:8d:65:
                    86:a2:79:ea:77:75:29:c3:8d:b6:c4:2b:36:0b:36:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:1C:EC:EF:63:91:5C:CF:13:E2:67:32:B6:5F:05:AA:70:52:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c9:e0:0c:25:39:98:0f:c7:fc:32:35:d0:a6:1e:df:2b:ec:
         cd:8d:19:2e:09:eb:a4:a4:96:31:1c:91:be:a6:cf:04:15:77:
         e7:ff:14:67:8a:b6:56:5b:5b:7a:0f:d7:4b:a2:e0:c3:17:f8:
         74:1d:64:27:c7:4d:01:cc:8b:11:96:42:31:4e:2d:10:79:9f:
         4c:33:a1:f5:9c:74:6c:24:55:f2:5d:4c:c8:04:fb:b9:1a:1e:
         d8:6f:6f:56:e5:27:bf:4d:16:e0:41:e1:c9:fd:40:73:ea:f2:
         6a:49:3b:d6:d0:5e:9c:88:e3:d4:b4:8d:2a:a3:9e:4a:72:ff:
         d0:9d:4a:ea:02:99:a5:86:e6:74:95:0d:3e:9a:55:cb:32:f2:
         a5:52:7c:d7:4b:f3:7e:f2:d3:13:80:36:86:cf:37:7e:79:00:
         01:fd:f6:70:ac:f3:b0:55:b6:5d:ed:29:a1:2b:2d:49:c0:fb:
         55:89:f3:0a:17:49:e1:e9:a7:bb:e3:a6:ba:e9:6b:67:77:4c:
         70:c0:15:f2:02:be:f0:a4:3e:b4:46:b8:10:49:95:fb:6b:84:
         68:7b:c5:01:e3:ff:70:3e:f8:30:ce:69:8e:66:6d:a6:5a:94:
         2f:51:66:96:7c:29:6c:c7:48:85:d7:d7:8b:92:2a:5b:1c:ce:
         02:27:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:55 2024 by rpki-client on console-fra.rpki-client.org