Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa
File:                     fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa (raw, json)
Hash identifier:          yrfxn2ALMb2mx6akmBYQB22yHoGQs7U7DkZC6xrFkIs=
Subject key identifier:   AD:C4:39:5E:19:76:F8:03:89:D5:CB:2F:49:B9:4B:E7:62:D5:64:FA
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF3C66AEFBCAC8823FFD00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        207.102.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:3c:66:ae:fb:ca:c8:82:3f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=8c63f17a-1b60-4991-ab64-c9d0a23532b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:15:5b:6d:62:02:69:21:7b:60:b8:ab:d7:
                    82:d0:24:b9:83:08:3a:37:1d:86:88:ed:66:5b:23:
                    63:5a:da:e4:80:f7:d4:8e:db:bc:e0:36:45:8e:82:
                    de:6e:80:71:41:9c:4a:d6:45:15:d5:95:f1:a4:9d:
                    12:9a:fd:29:08:93:40:b7:82:76:cb:ab:6b:e6:e2:
                    18:1b:74:92:29:8d:19:61:8a:4f:de:02:a0:4c:c8:
                    04:b3:b7:93:93:6d:f9:d3:13:09:83:97:ff:39:83:
                    40:68:2a:08:ca:75:0e:5e:95:bf:38:d6:9e:89:a3:
                    45:d1:60:55:1c:c5:c1:5c:73:ee:76:7c:d4:7b:c0:
                    cb:88:3f:43:d4:72:83:fa:69:2d:05:6f:ba:c7:3e:
                    a6:ea:e2:05:b4:47:87:fb:67:df:c9:d9:b6:86:76:
                    97:bd:a5:82:87:f5:35:a3:c9:58:e5:92:e6:c0:17:
                    32:ff:02:b6:d3:89:c7:e1:85:37:b5:58:fe:3d:33:
                    24:14:e6:2a:1b:07:da:cf:1c:97:4d:73:76:c6:a5:
                    87:d2:72:d4:25:be:c8:33:ff:3b:52:e3:bc:67:f3:
                    6c:9d:35:96:2e:a8:68:91:51:d5:4a:4d:50:ef:31:
                    47:a0:79:69:9b:cf:d5:97:85:75:a1:e5:6c:b9:65:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:39:5E:19:76:F8:03:89:D5:CB:2F:49:B9:4B:E7:62:D5:64:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:43:ac:01:c4:c0:b3:5a:74:b9:f7:03:5d:d3:be:b6:f8:0d:
         ba:97:b1:63:14:dc:24:ae:08:6b:d7:27:1a:98:f2:cc:68:b4:
         29:89:de:ca:60:be:cb:51:80:12:ed:1a:da:8f:38:3f:d7:51:
         90:42:31:07:0f:34:ed:7c:0f:9f:8c:7d:9a:46:63:3f:f8:23:
         e0:c2:69:0a:44:77:38:a1:e6:15:93:a7:1f:a0:d6:62:4d:8d:
         91:55:df:7c:8c:fc:36:7f:c8:af:07:00:6f:9e:9d:23:9e:bb:
         45:55:82:f3:1b:68:09:34:42:6c:56:82:2c:67:2a:90:07:9a:
         35:a3:f7:96:07:fe:b3:d1:81:e0:6f:02:11:7f:5d:b0:86:f1:
         cd:f3:cc:8b:4e:70:62:8d:c0:6f:11:fc:4f:d9:f4:2b:a6:fb:
         01:9d:d3:1a:63:d0:e7:34:bd:58:a5:4b:48:56:63:28:4a:10:
         a9:17:23:50:82:1b:1c:7e:57:35:62:a9:56:08:cd:a9:0b:64:
         04:c1:71:86:4c:48:6d:dd:36:a3:fb:73:7e:02:f9:4f:ef:81:
         86:6f:2e:e6:1a:e5:75:cf:d8:37:fd:b6:13:b8:57:5c:ed:d4:
         ec:7a:36:2e:f8:dd:f1:fc:59:96:76:29:fc:28:da:8b:41:9d:
         bf:c5:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:59 2024 by rpki-client on console-fra.rpki-client.org