Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c59d969f-f292-37b9-a763-9c8adf52bacf.roa
File:                     c59d969f-f292-37b9-a763-9c8adf52bacf.roa (raw, json)
Hash identifier:          TVvm0unXOLrwizZJQJy5E+oGcKm7azG2U+8TrHUvJvw=
Subject key identifier:   AE:AF:29:A9:07:BA:CC:02:D6:88:48:37:4D:38:17:BF:2E:CC:73:6B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF3F0DE8D460CA0E662D20
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c59d969f-f292-37b9-a763-9c8adf52bacf.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        207.34.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:3f:0d:e8:d4:60:ca:0e:66:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=b75bc58e-1643-449e-b54d-ef2708732eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:82:d1:6b:62:ae:cb:d8:a9:1e:4a:a7:ec:
                    c7:39:4d:8e:d8:e2:ec:81:51:10:f2:67:7f:e3:81:
                    75:69:cc:77:ee:d1:a3:e7:13:50:48:18:00:c7:82:
                    60:b9:01:6f:4c:85:ae:6a:bf:bf:10:44:7a:a2:72:
                    68:ce:7b:69:54:c6:77:ac:cf:61:54:89:7d:45:61:
                    05:09:13:5a:bb:17:0a:26:7d:53:7d:44:10:92:b2:
                    08:1e:c2:56:61:76:26:ea:aa:1d:ca:ed:0b:a5:c1:
                    f6:6a:cb:be:36:75:0c:db:90:03:ac:fd:af:4d:49:
                    51:81:cc:e2:6b:a0:ae:76:96:ef:db:8c:a0:14:c6:
                    8f:27:b8:d3:a2:8d:64:2d:51:02:9b:21:d9:f0:6d:
                    8c:7c:2c:28:2e:65:7d:65:52:e6:2f:7f:21:0b:b9:
                    94:87:6c:ae:88:f9:f6:5c:df:28:03:b0:0b:11:d1:
                    61:cc:a5:01:40:14:3f:5c:07:45:86:ea:d8:68:ea:
                    08:2b:fb:3e:be:96:12:06:66:44:ae:d3:cb:97:1a:
                    d1:de:9c:8d:6b:37:e5:21:66:20:1a:e8:75:5d:69:
                    e9:d6:61:59:d5:d4:08:f3:2f:61:94:2d:54:8c:d9:
                    80:fc:e4:fe:7c:a9:fd:f9:fa:00:68:66:fa:9b:ac:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AF:29:A9:07:BA:CC:02:D6:88:48:37:4D:38:17:BF:2E:CC:73:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c59d969f-f292-37b9-a763-9c8adf52bacf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:68:24:03:63:71:54:fe:71:5e:79:d4:48:67:70:52:db:32:
         5f:5d:82:96:9b:46:4c:9f:71:99:6f:6c:7a:71:8d:04:22:4d:
         3d:69:5b:0d:cf:ea:33:38:52:5d:ec:f5:62:0f:02:e8:f0:0d:
         70:22:4a:e8:7a:42:c7:02:30:aa:8f:f9:25:53:4c:14:cf:d1:
         bc:56:d1:a6:0b:be:74:69:d6:77:aa:95:a3:5b:4c:59:74:b7:
         3a:52:4e:57:4e:e9:83:3b:fe:37:e0:fb:ac:25:b4:ab:66:b3:
         0e:e4:04:93:fe:bf:25:42:69:3e:0e:d5:bb:65:dd:35:2f:c0:
         63:4f:39:bf:b5:d1:a2:96:5c:6f:1b:da:19:e7:2c:3e:38:5a:
         38:4c:44:18:46:c7:e5:b3:03:b5:67:28:bd:67:62:ba:5f:62:
         80:b5:a0:89:03:49:5c:93:5a:f8:50:d4:cc:43:a4:d4:f6:e6:
         ce:d3:9d:61:08:28:64:c6:b4:00:12:b0:80:62:cb:55:68:32:
         4a:33:43:86:ac:42:c3:76:7f:5c:27:40:51:17:f6:49:67:08:
         02:5a:90:8c:43:e9:47:a3:e9:6e:8a:c2:6e:8b:f7:7b:a0:32:
         8b:63:04:86:60:6d:65:82:f3:6d:a7:92:43:70:21:84:88:2b:
         4f:b5:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:50 2024 by rpki-client on console-fra.rpki-client.org