Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa
File:                     aa9337db-fe12-3582-ada2-1a967639968e.roa (raw, json)
Hash identifier:          T6N3Sex+YKhoC/y7XlxjucxVXMfhCQ7k7WQ4y1KS4EI=
Subject key identifier:   0E:4B:1C:89:79:28:58:04:3D:AE:C5:6F:BF:B7:B5:1D:0D:38:6F:72
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F432858473095F64C8940352BF66E3E80
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        134.195.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f6:4c:89:40:35:2b:f6:6e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=694c0903-66ac-4774-b12f-7424c2f1961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:54:28:6f:48:77:e2:99:90:5c:e3:1f:1e:
                    77:7b:7c:f3:b4:80:ca:3c:70:31:30:75:96:5f:57:
                    ec:fc:af:37:6c:c1:9c:24:f2:c7:0d:d1:17:27:85:
                    a5:fb:27:7f:85:0c:05:23:7e:86:6c:02:e8:4e:ff:
                    e1:53:a2:67:4c:6d:d7:28:14:7b:78:90:b9:ff:5e:
                    6b:0d:ad:92:d1:47:46:f2:8e:b7:2e:24:a2:24:ca:
                    ee:80:c2:01:7a:ea:9d:fb:e3:eb:da:87:83:bf:63:
                    03:76:ef:12:f8:d1:e6:92:3a:c2:cf:6a:72:7c:84:
                    4f:4b:d5:e4:01:35:2c:1f:e4:64:eb:e8:a1:fb:ac:
                    78:ad:65:17:5e:69:33:d7:18:56:b8:1f:23:e9:b0:
                    e8:5f:04:3e:e5:3d:1e:b8:dd:1a:d4:d6:4d:a7:22:
                    76:3e:9a:83:5f:3c:c0:dd:8c:72:ad:7b:83:7f:b9:
                    d7:6c:b9:2e:79:dc:4c:2d:ab:2b:16:c8:f5:b3:71:
                    fb:99:b6:2d:62:92:48:1e:b0:4b:86:72:d9:2d:04:
                    99:65:52:fc:c2:c8:20:50:0d:0f:25:5c:87:68:70:
                    3b:cc:8f:df:47:54:b4:80:3e:4f:d5:90:21:ae:bd:
                    0f:56:e7:6c:18:03:d8:54:fa:aa:3e:e0:3a:ae:82:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:1C:89:79:28:58:04:3D:AE:C5:6F:BF:B7:B5:1D:0D:38:6F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:25:1a:ba:e9:6d:63:6e:08:4e:14:24:2c:e4:35:d3:13:5d:
         fa:2c:f0:72:2d:a3:23:e7:07:b4:de:a4:53:75:dd:be:3b:d8:
         e6:bf:3d:bd:3a:e0:a5:db:0e:79:1e:9e:43:c9:49:f1:ac:f2:
         5c:96:ec:c0:9a:78:54:cc:f4:5f:5a:e3:fe:2c:ef:26:de:d9:
         1c:90:26:6d:09:ee:8e:f0:aa:07:5a:40:2b:08:95:be:cd:5f:
         90:54:7b:13:88:d0:cc:4c:3d:81:88:b2:6b:2f:47:40:4e:8f:
         5f:cc:0b:c8:36:b3:6f:09:18:b4:40:41:ee:19:0b:9a:b5:c8:
         9f:a2:df:5d:cf:c1:4e:7b:9c:f9:09:02:3d:e9:75:c0:98:83:
         65:ae:30:1e:94:88:c1:a3:f5:ef:5d:9f:db:ff:a6:82:0a:ab:
         e2:02:34:08:d1:5c:94:7d:22:ed:fd:fc:6b:ba:29:98:e8:db:
         05:ee:76:e4:be:87:38:36:cb:8f:2c:dc:3e:23:7a:a0:13:15:
         cb:39:01:bc:68:c4:5d:3f:60:e3:99:43:19:c1:5c:7d:13:f4:
         bc:96:af:97:b0:a1:f2:28:cd:8b:62:ef:47:30:0a:c4:70:66:
         5f:34:a5:ec:96:cc:b7:39:7d:f2:5b:dc:a6:37:58:29:c8:6f:
         1e:f5:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:19 2024 by rpki-client on console-fra.rpki-client.org