Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa
File:                     8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa (raw, json)
Hash identifier:          W91lmeSFgf9FJ9VMJAGidRz+cy6aTXoFRId8jP6d5+U=
Subject key identifier:   9D:10:20:22:79:64:34:A5:30:96:7D:73:D8:45:4C:86:6E:8E:10:56
Certificate issuer:       /CN=7e860267-056f-4836-b9b4-0bc612378041
Certificate serial:       010D0C9F432858473095F5FC51D39545B99E2F80
Authority key identifier: BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     30272
IP address blocks:        67.159.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f5:fc:51:d3:95:45:b9:9e:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e860267-056f-4836-b9b4-0bc612378041
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=0e4c0b76-f736-4454-83b1-1405c55a885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:e6:97:0d:f6:4f:36:d1:21:b1:ce:1d:4f:
                    f0:cc:d6:95:44:e7:5a:ab:5d:00:63:06:da:e8:00:
                    42:8e:33:56:1d:cd:05:dc:8f:01:d5:6a:f2:ec:ad:
                    8c:8b:fd:d0:dc:06:c5:d0:d8:e9:ca:42:7d:b5:3d:
                    5e:a6:4e:c4:c8:07:b2:f8:92:37:19:21:e0:05:d6:
                    b1:4e:45:c1:ea:d5:89:34:46:83:00:7e:02:80:94:
                    64:37:fd:e1:4c:0e:5a:b4:87:c2:18:d3:81:dc:f5:
                    03:15:f5:5f:d5:5b:46:21:6b:fc:e9:3d:7a:98:da:
                    26:f7:99:8f:c1:01:1b:66:42:8f:ce:bb:8f:2f:94:
                    c0:71:5d:bd:e8:c1:b3:62:9e:30:ea:fb:d0:8b:c7:
                    c0:81:98:97:74:db:d3:67:95:f0:28:40:a8:e9:88:
                    51:88:40:ef:31:33:6d:f4:a5:46:75:8f:72:42:4a:
                    34:06:0f:ac:79:f5:8f:28:ff:e9:a0:21:ef:95:6d:
                    ac:52:b2:59:43:91:d8:54:26:85:7f:1f:4b:c4:21:
                    1f:d5:c5:ab:af:43:da:94:de:9c:03:82:58:7e:8e:
                    2c:a0:14:cb:be:32:26:ac:50:dd:3e:90:d6:92:9e:
                    36:b9:86:9d:0f:07:f7:46:47:ac:7c:8f:73:df:73:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:20:22:79:64:34:A5:30:96:7D:73:D8:45:4C:86:6E:8E:10:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl

            X509v3 Authority Key Identifier:
                keyid:BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:15:d0:6e:79:42:cb:3c:f7:f6:95:3d:11:53:61:07:a7:62:
         19:2a:43:43:34:51:fd:a3:d0:04:11:b3:a8:be:a6:ab:9e:b8:
         7e:51:55:2e:b3:43:9a:7b:da:40:9a:18:ce:b6:54:05:a8:d8:
         7f:bb:81:45:05:7b:e0:c6:9a:10:78:40:b2:9f:19:15:f7:cd:
         61:34:da:05:47:72:15:1d:7a:36:38:3c:70:94:d3:fb:a9:ff:
         b7:d2:30:98:19:3f:79:c7:64:f7:b8:08:c9:04:e1:4f:d3:38:
         e3:10:62:69:9a:b3:14:df:5b:a6:86:2a:0a:6e:17:5a:0b:ae:
         48:03:90:be:24:ad:a4:19:40:66:f0:60:ff:c6:0a:22:08:a6:
         89:9d:4a:a9:6d:c4:8f:5e:34:e5:b3:d5:94:58:e5:d3:f7:d6:
         2b:e8:49:a3:2e:59:b2:62:3f:ee:0e:03:ed:11:99:f4:47:78:
         c7:17:a4:b0:e7:65:79:c5:d3:74:c1:59:0b:ee:19:e2:16:6f:
         14:f1:f7:7c:ef:37:ed:0e:bd:35:55:d6:51:c2:73:f7:93:b9:
         d8:42:a7:bb:91:d6:9c:6b:30:9d:ea:cc:9b:9c:56:17:0a:4c:
         4b:99:71:c6:8f:8b:b7:c5:f2:6d:f9:7b:8b:b8:02:59:ae:62:
         9f:c2:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:54 2024 by rpki-client on console-fra.rpki-client.org