Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d2d64d9-1a33-3ed5-ab52-df28be07622c.roa
File:                     9d2d64d9-1a33-3ed5-ab52-df28be07622c.roa (raw, json)
Hash identifier:          vIUTdoVI06o+/OXD/cJiArumnxEK+/R4ovCsoiY93Vc=
Subject key identifier:   31:A5:10:06:49:8F:DB:DE:73:6E:CB:FA:63:B0:3C:6C:4F:23:8D:9A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847CE6F374474ACE04B7A5E3EE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d2d64d9-1a33-3ed5-ab52-df28be07622c.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     19905
IP address blocks:        207.34.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:37:44:74:ac:e0:4b:7a:5e:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=966ccb35-4772-4512-8148-ed9c689ce07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:83:3e:f2:49:bb:86:06:da:6b:aa:29:7a:
                    ae:59:03:f2:54:6c:f2:aa:f7:92:2b:be:3d:7e:55:
                    e8:49:92:4a:57:75:8e:cc:b7:25:90:85:ab:9a:87:
                    8e:34:5e:ec:1f:7a:2c:fa:1b:bb:81:68:e8:1b:08:
                    19:bb:18:46:6d:8e:d9:db:4e:8a:61:45:f2:d1:e3:
                    73:ff:43:ba:9d:f9:87:ad:07:3c:4f:c0:c3:03:be:
                    a9:77:4b:08:65:11:d7:e7:0f:c2:63:bd:f0:19:19:
                    f8:c9:cb:47:3d:9c:8b:33:fc:c0:ca:84:f7:21:2e:
                    93:45:79:ad:15:5c:c2:4b:b9:79:53:91:f2:ad:53:
                    79:e4:36:68:36:38:f4:03:b6:ba:f0:97:60:bb:85:
                    09:71:55:b1:87:38:05:a6:50:c6:1b:86:7c:0f:e4:
                    7f:8d:e0:31:62:24:8b:75:e6:3e:c2:59:ab:48:8c:
                    2e:52:b3:eb:ea:ca:2d:a4:3c:fd:03:a8:b8:01:69:
                    86:ea:70:88:fe:8d:51:5b:3a:99:27:55:94:9b:17:
                    a8:dc:20:24:54:ee:de:de:be:a0:78:e0:0a:5a:84:
                    d4:a0:87:73:14:ca:91:25:ef:f5:94:bb:bd:44:3c:
                    b7:c9:d9:fb:9b:0a:15:f5:29:c9:4a:dd:a2:cb:13:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A5:10:06:49:8F:DB:DE:73:6E:CB:FA:63:B0:3C:6C:4F:23:8D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d2d64d9-1a33-3ed5-ab52-df28be07622c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f0:db:92:ef:65:58:c8:17:bd:34:04:b7:e2:9c:cb:48:33:45:
         42:9a:52:80:bf:cd:f0:41:fd:99:c5:9c:dc:4c:12:3f:27:89:
         b1:98:49:eb:a8:99:72:18:94:80:4a:42:b5:85:86:85:4c:b7:
         14:dd:47:2d:33:6b:8f:56:39:3e:c2:95:a1:8f:45:55:46:b8:
         a3:16:93:98:0f:4e:44:60:6f:54:3d:7a:b2:e2:4a:d7:26:78:
         86:f1:95:c3:0c:1f:28:61:26:da:0c:73:bd:e5:b8:9c:53:45:
         b2:91:fb:02:ef:ba:0e:28:f8:ae:62:41:ae:01:e9:96:9c:d2:
         09:cb:61:6c:8b:c4:20:64:18:9a:28:b9:58:fd:f6:ff:af:ff:
         ca:ef:b4:2c:ce:df:3a:bc:4f:02:59:3e:2a:cd:bb:25:23:33:
         c2:ee:4f:c1:1a:a2:eb:1c:cb:72:f8:a2:97:82:b7:bb:77:6d:
         ff:24:cd:58:9e:f1:cb:2b:4a:03:ac:5c:29:8c:29:ac:67:d1:
         bd:5e:4d:63:f8:1d:ec:3e:0e:e2:17:56:3f:9d:75:e2:ae:ad:
         03:5a:6f:f1:6e:ab:de:30:2f:77:af:f8:ff:91:8e:40:08:15:
         35:32:b4:bf:c3:27:0d:9d:e9:ce:36:f6:9f:fe:ad:39:fa:fa:
         aa:84:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:28 2024 by rpki-client on console-ams.rpki-client.org