Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
File:                     6a843965-6a31-3da1-9407-4565c9497daa.roa (raw, json)
Hash identifier:          kAUR4qY8WMKiZ6NtyR2ume8WMPCRL2rnY+wgMHS5+UI=
Subject key identifier:   03:38:7C:AC:50:CD:FE:7A:53:74:FA:3B:BD:C3:11:3F:98:19:AE:EC
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858474420BBDF2208C55D4C03CF00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     57043
IP address blocks:        209.182.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bb:df:22:08:c5:5d:4c:03:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=b9c0d6f5-f343-4839-b83b-fc71daa47967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:30:cc:00:1f:d5:87:91:99:0d:e3:e2:ff:
                    27:01:d0:23:36:62:18:38:f7:d2:4e:d2:ea:09:77:
                    6a:fd:37:4d:58:d8:5a:b7:db:d1:dd:9e:83:4c:8a:
                    b7:37:fe:15:9c:98:a5:b0:ee:4c:52:f6:1e:08:1f:
                    57:72:07:05:b1:e0:0c:5a:9d:8c:b2:61:ae:15:db:
                    79:a1:54:43:65:89:81:cd:5e:cf:04:4d:e0:46:0e:
                    65:80:e7:78:98:dc:4f:67:40:7d:c6:b8:80:0e:7a:
                    ba:fd:75:df:96:e0:2a:84:00:47:1a:b3:16:45:a3:
                    fb:b6:e2:a4:8d:a8:02:4e:31:94:a3:6e:6a:c3:e3:
                    48:1d:fc:97:5b:f9:96:88:b5:fd:38:27:ac:8f:4f:
                    2d:c1:ec:56:39:2a:c4:61:13:c1:00:9c:2f:31:eb:
                    53:fe:fe:0a:f5:e8:f1:52:b6:9a:cc:59:c1:e2:f3:
                    c9:52:9d:d5:99:7c:18:d0:7e:b7:a0:8a:3f:a7:db:
                    85:61:98:39:a0:7b:21:71:cc:6f:3c:9e:ae:82:5d:
                    0a:72:1a:8a:75:5b:1e:a0:53:30:a7:51:03:05:f7:
                    aa:44:22:0f:2f:f7:0d:c5:c4:bf:d9:43:9e:2b:7e:
                    e6:ef:e4:6c:d0:09:60:44:98:ac:b8:69:3b:34:32:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:7C:AC:50:CD:FE:7A:53:74:FA:3B:BD:C3:11:3F:98:19:AE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:46:1c:4d:91:b6:36:3b:27:f4:a0:32:d7:c0:05:c6:d7:
         42:70:69:bd:8e:b6:ca:03:91:b8:a4:d5:3d:96:a7:8b:2c:dc:
         67:71:62:2b:5a:50:e1:8f:d4:16:bb:08:ba:9f:4a:92:df:fe:
         e6:88:43:c2:9d:92:4e:2a:01:eb:c1:88:c1:84:41:87:75:b8:
         6e:d5:69:b0:f8:60:4a:ac:ae:4b:a6:c2:10:3f:1f:bf:a0:ab:
         a7:ad:46:b9:39:53:24:cb:18:23:a3:33:35:0e:f9:dc:49:08:
         a5:b2:62:9b:7e:4e:c7:b9:7b:5a:4d:05:ce:4f:af:37:37:29:
         7d:1d:77:19:9b:da:1f:e9:05:47:1c:59:10:9a:f2:b7:6b:5b:
         42:27:62:9f:07:c3:93:cd:57:a5:7c:35:93:c3:61:b8:85:31:
         e9:b7:c7:4d:2b:bb:9c:7b:bb:2e:03:ef:07:9b:80:33:f7:63:
         5f:91:3b:32:27:d1:3c:aa:42:44:cc:ec:8d:1d:66:b4:a3:57:
         4d:c5:26:ad:42:31:a1:56:5d:68:33:a0:6a:a3:e3:35:0f:ac:
         61:e3:d3:77:d5:45:b5:73:45:cc:80:17:45:f8:3b:4a:55:42:
         ae:e2:39:34:fc:88:51:04:d6:11:15:e4:ea:8a:39:27:c1:ee:
         0e:20:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:13 2024 by rpki-client on console-fra.rpki-client.org