Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa
File:                     00ea4238-793c-3ca7-9a51-330cb7f4b941.roa (raw, json)
Hash identifier:          0BWzOVkJxt0xjn1iLiFNcdhQROpyu4vKeHmvL22Ch5k=
Subject key identifier:   ED:19:36:0C:B1:ED:84:51:37:10:41:8C:37:1D:4C:04:04:93:CD:2A
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285847792BB40C58EAFA820AF5AF40
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     6079
IP address blocks:        208.72.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b4:0c:58:ea:fa:82:0a:f5:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=04d09683-ca63-4714-9fdf-e40fc34ee7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:94:fb:59:99:ab:a7:7c:2d:73:89:62:90:
                    33:69:3f:67:bc:04:ba:6e:7b:0c:59:62:1b:74:cc:
                    f0:b8:52:06:08:bf:37:de:61:7e:95:91:5a:00:e6:
                    7d:9a:e3:7a:70:92:63:a0:f3:03:1b:bf:4a:1a:0c:
                    b2:80:06:91:92:87:96:60:16:dd:65:91:7d:08:c1:
                    bd:05:db:a1:92:03:d2:2c:ad:fb:6e:59:1b:d0:fa:
                    46:2c:58:37:bd:9d:56:41:f0:99:2f:39:2d:b9:8d:
                    b6:7c:32:a7:77:f1:1e:f6:c3:aa:aa:e3:3c:e3:d6:
                    d6:59:5a:e2:2b:ce:14:a5:28:e7:05:66:fa:99:20:
                    5d:d7:22:97:4a:02:bd:b4:61:d0:30:ca:de:0d:19:
                    39:3c:89:58:97:b3:e0:f3:86:79:6e:86:00:96:d6:
                    0a:49:ce:f4:87:8e:94:fc:0f:05:bf:b2:ac:10:8b:
                    69:ac:37:64:36:54:6d:55:05:30:e3:14:27:9a:ca:
                    c6:69:6b:61:57:c6:77:f0:c0:2d:ed:b3:d3:bc:38:
                    6a:a2:ad:38:a4:cb:37:5a:1e:40:a4:fe:10:88:70:
                    44:41:15:19:58:a5:1e:ad:07:c4:d5:1d:b7:7d:0d:
                    d4:fa:5c:f2:6d:77:dc:b1:56:ea:0b:08:00:0c:8b:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:36:0C:B1:ED:84:51:37:10:41:8C:37:1D:4C:04:04:93:CD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:38:72:45:7b:30:33:0d:b2:c0:b7:df:d4:a2:fe:d7:72:b0:
         7f:a0:26:d2:11:2d:82:87:2d:34:14:16:a9:97:09:0a:3c:d3:
         12:c8:54:2b:d0:2a:88:5b:6a:40:8b:7d:07:1f:5a:01:ae:28:
         c0:15:71:9b:b7:55:72:3f:40:7a:c1:72:e1:31:17:ac:93:a2:
         a9:a5:10:a6:31:d5:da:39:6e:80:8c:fb:6f:f9:38:52:05:84:
         ac:31:c4:b7:c2:12:8f:6f:61:4d:62:3c:ca:cc:a6:fb:67:a0:
         58:c5:6a:64:80:f6:9b:9a:77:14:57:66:cb:a8:51:76:73:46:
         9f:12:a0:cf:64:20:b1:6e:b2:da:ec:2c:0c:e9:ec:3c:c6:31:
         c9:a0:c5:ab:33:28:c1:de:6c:b5:3b:59:10:55:66:fe:8a:2d:
         e7:52:df:fe:85:c8:3d:46:47:3a:e9:c4:0c:ad:56:52:ae:73:
         ed:e2:1b:09:2b:b9:75:7f:3d:c7:a2:09:24:73:4a:cc:ad:97:
         60:0f:a4:d8:2d:33:89:19:f0:25:9f:5c:22:ad:53:5f:0f:41:
         d9:a3:24:8e:a0:c4:be:d5:10:38:35:ab:36:95:4d:dd:5e:b1:
         8a:a7:25:ed:13:5a:2e:3e:bb:1f:a3:23:17:bc:a8:16:24:11:
         dd:f1:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org