Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ac31cd0d-5a72-3531-9eec-75b76993c66c.roa
File:                     ac31cd0d-5a72-3531-9eec-75b76993c66c.roa (raw, json)
Hash identifier:          svbvuiUbpIlMp0Q2KtavzHy90q0Rq58g4FrJy0Ppb7Y=
Subject key identifier:   B0:CD:C3:50:D2:30:E0:2D:C5:68:E4:A8:FB:8F:51:15:E3:97:2E:9D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858475ACA70E0D7A89CC410771BC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ac31cd0d-5a72-3531-9eec-75b76993c66c.roa
Signing time:             Fri 27 Sep 2024 15:50:36 +0000
ROA not before:           Fri 27 Sep 2024 15:50:36 +0000
ROA not after:            Thu 26 Dec 2024 16:50:36 +0000
asID:                     23470
IP address blocks:        217.20.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:ca:70:e0:d7:a8:9c:c4:10:77:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 27 15:50:36 2024 GMT
            Not After : Dec 26 16:50:36 2024 GMT
        Subject: CN=b9221f2c-1a9d-4e31-94f9-bbc61c00da03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:90:3d:27:95:0b:d9:2f:b2:f1:4f:5c:dd:
                    82:66:aa:fa:a2:8b:3b:06:c5:fe:1d:e5:8c:51:2e:
                    c8:6f:88:ea:7e:13:e2:18:7e:0b:f9:5e:45:4f:5a:
                    08:bb:a2:b3:fa:b7:b2:9c:6b:a8:be:53:03:2a:4c:
                    a9:54:35:01:6c:b4:ff:2a:49:01:ac:09:c9:e8:af:
                    5e:ca:2f:f5:4f:33:31:aa:86:db:d4:ea:77:12:ca:
                    ce:48:49:8f:c0:09:1e:d6:19:3c:25:81:91:f3:3a:
                    c2:3b:1c:db:6f:bc:8d:fc:2c:15:d4:8c:e6:57:83:
                    0b:43:d4:c3:4a:4d:e5:62:6b:64:48:3a:aa:87:aa:
                    29:19:b1:53:7c:39:b0:75:6b:c5:b0:39:db:0a:b5:
                    05:6d:1f:0f:73:90:67:4a:86:81:98:3c:5f:74:dd:
                    02:33:43:28:a1:fe:0b:3a:b0:ba:09:29:f1:4e:09:
                    1d:9c:43:29:e9:60:17:54:5a:bb:02:fb:7c:e8:61:
                    9c:f6:f1:9e:bc:eb:08:88:ee:c9:92:df:41:58:81:
                    45:45:66:70:95:79:20:1e:4a:e9:cf:07:6a:53:67:
                    04:1d:f9:30:1b:40:96:fb:20:d5:76:1b:17:55:95:
                    2d:72:ac:ba:95:52:59:63:9b:04:0b:0a:2a:50:3e:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:C3:50:D2:30:E0:2D:C5:68:E4:A8:FB:8F:51:15:E3:97:2E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ac31cd0d-5a72-3531-9eec-75b76993c66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.20.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:cd:a0:1d:f2:d2:26:9b:e4:18:d3:4a:ce:f0:6c:bd:ee:
         f5:be:b8:90:3d:3a:35:10:16:f0:2f:a7:13:d1:4d:c7:d6:3b:
         2e:1a:d4:d8:af:35:8d:97:41:34:2a:e8:f7:63:46:d2:11:70:
         9d:90:b3:66:43:82:7c:db:9f:07:6c:52:0e:75:f2:20:7b:76:
         25:78:29:ea:45:76:fe:95:9a:ab:9f:d5:71:d3:ae:a7:1c:81:
         78:c3:5f:fd:8e:4c:b0:36:ae:6e:d3:20:a0:7b:e3:e5:8c:ff:
         9e:64:2a:92:25:aa:31:09:7c:bd:3d:8d:6c:52:83:19:cd:64:
         03:3f:6f:f9:89:c6:d1:dc:a4:b3:eb:e6:6f:42:5d:94:48:2b:
         e4:c0:ca:f6:31:cd:94:2a:b7:ba:32:17:ba:8d:98:45:b4:3a:
         b9:5f:d9:58:34:a2:80:75:a9:cc:99:82:cd:ac:06:9e:30:15:
         58:87:ea:5b:ab:b1:04:2c:c3:4e:0b:be:fa:d7:5c:3b:84:65:
         d5:7d:e6:07:54:55:22:db:50:b8:b8:8f:0c:e8:76:69:dc:15:
         72:f8:25:9c:bd:17:ce:b3:45:68:0f:d1:e0:6c:ed:eb:61:10:
         fe:f9:f6:8b:0f:e1:b7:89:58:6a:c4:3b:9d:f3:dc:87:08:c7:
         4d:d5:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:01 2024 by rpki-client on console-ams.rpki-client.org