Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/00e2b57c-0645-3252-b88c-b7ba89f3aed1.roa
File:                     00e2b57c-0645-3252-b88c-b7ba89f3aed1.roa (raw, json)
Hash identifier:          oa0/zMAfb4xkrIS6bTKc/Cl98MXnLvMcFR1oGgMc1DQ=
Subject key identifier:   2C:B6:06:A5:69:EC:0D:42:1A:45:B9:D8:25:8B:12:F9:31:F8:D7:BF
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F432858473095F63AA7D62DDC5CE4D480
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/00e2b57c-0645-3252-b88c-b7ba89f3aed1.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        134.195.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f6:3a:a7:d6:2d:dc:5c:e4:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=15eeff46-2c8f-46a1-b906-6a16a627ba78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:65:02:7a:b4:a3:74:2f:59:3e:e1:e4:cf:
                    66:89:f7:fe:27:aa:85:fa:42:7b:af:55:b0:e2:ae:
                    e8:78:ab:7f:ce:f6:98:1c:d8:cc:b9:68:b2:d0:21:
                    3d:c8:aa:b8:5e:19:d7:bf:9e:b5:ca:9c:6a:3f:50:
                    51:eb:34:a8:98:60:50:c2:7f:d6:06:07:d2:9f:aa:
                    81:4f:df:bf:87:ca:4d:d4:ef:1f:12:c4:47:64:6b:
                    b2:d3:6a:54:d4:f7:7d:05:a2:93:da:b1:43:c5:fd:
                    dd:2b:bd:1b:84:32:64:88:4c:7b:cc:1c:79:35:b5:
                    06:60:ef:91:9e:6e:83:ad:db:0a:61:5d:6c:43:32:
                    4d:87:df:74:82:68:d3:7d:bc:cc:3c:0c:e7:65:0e:
                    42:cf:a0:f7:04:bd:fd:f4:e8:ed:28:c3:13:35:ad:
                    41:c2:42:0d:21:19:82:9d:2c:7c:43:8a:ee:0e:36:
                    65:d2:20:29:38:39:d2:ea:25:06:6d:fd:33:66:67:
                    8d:5b:8c:13:e9:90:f0:d8:22:7a:ab:69:f4:fa:0e:
                    5d:4f:77:06:e8:b3:0a:16:17:bf:d4:6f:79:0c:46:
                    8e:d5:93:10:b5:c1:a9:8c:6c:07:84:77:c3:75:9e:
                    46:c6:cc:3f:5a:95:34:2a:d4:2e:26:bc:9e:d1:d5:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:06:A5:69:EC:0D:42:1A:45:B9:D8:25:8B:12:F9:31:F8:D7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/00e2b57c-0645-3252-b88c-b7ba89f3aed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:bc:73:e5:2e:c8:ed:4e:e3:18:e2:74:64:08:f2:0f:3d:
         fc:03:b9:b7:48:7b:12:1a:68:0b:48:3c:8e:f2:43:fb:b3:20:
         98:3b:8a:c7:c2:7a:eb:af:ae:49:6a:24:8e:8f:9d:e6:26:a3:
         7b:8a:95:e9:88:0b:36:13:1d:0e:dd:38:7f:c0:ea:1f:38:cc:
         9b:0b:c7:21:5c:aa:11:a9:fe:86:3c:f5:90:2c:e4:2c:9b:9c:
         a1:d6:28:d2:11:21:bd:28:a7:b7:1e:18:23:64:26:b4:33:5f:
         30:3b:f3:85:ae:1e:f1:ba:92:72:ea:ff:26:d0:d0:93:89:cd:
         cb:d7:3a:09:63:12:09:55:13:9c:78:a9:71:ea:78:cc:9e:18:
         4a:19:b9:65:50:1f:90:37:0f:bf:d3:65:1e:c0:28:5e:bc:bb:
         61:e5:5d:7e:f7:b7:43:df:04:6b:09:0b:51:6f:4c:71:df:e3:
         84:f2:1b:51:36:d1:54:31:24:36:19:10:dd:02:69:e9:d9:21:
         0c:a7:27:d8:f8:98:97:a5:15:d4:f6:20:7b:67:6e:6e:04:8f:
         05:d5:5c:75:9e:e2:01:b6:10:54:e8:cf:78:b5:07:d2:29:08:
         f6:b6:46:29:8a:65:83:40:c4:a9:0f:a6:c2:c3:8f:2c:e0:f8:
         4b:82:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:09 2024 by rpki-client on console-ams.rpki-client.org