Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/ed9064fd-ab37-3c7a-9c1f-b5f83b35b6da.roa
File:                     ed9064fd-ab37-3c7a-9c1f-b5f83b35b6da.roa (raw, json)
Hash identifier:          X9HFRhStGl6Ah+Cl1So+vqYnrZwzo/R+TOck0Q9Hy2I=
Subject key identifier:   BB:C0:A6:EA:9A:60:7E:FE:6A:63:47:36:E3:E8:7E:38:70:7C:F7:A0
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F432858472405B4B53E83E67A53959220
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/ed9064fd-ab37-3c7a-9c1f-b5f83b35b6da.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     216050
IP address blocks:        204.9.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:b4:b5:3e:83:e6:7a:53:95:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=0e94ec0f-f6f7-4fb2-95d3-740ac2acd33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:68:02:2a:a3:6e:3b:b0:c9:83:1e:11:f8:
                    83:c2:25:f6:1c:ad:ff:8f:1b:e7:2a:5f:a5:72:be:
                    0a:6c:dd:c6:72:06:43:f7:92:4a:66:cc:65:ee:22:
                    d8:6b:ee:d3:b7:be:2a:22:e7:ee:bd:05:53:e9:0d:
                    36:29:9d:36:3a:16:43:3b:37:50:54:04:90:90:62:
                    75:79:41:42:5c:07:d5:c3:78:08:7b:74:cc:ef:5d:
                    81:fe:bf:70:8a:c4:42:08:ed:75:c0:db:5d:96:15:
                    31:f2:fb:f6:95:29:41:39:30:32:2b:11:1a:22:81:
                    ea:40:a9:fa:6e:68:3a:00:2b:54:bb:6c:42:5d:e5:
                    92:c9:d4:eb:bf:d7:7b:a0:6c:2a:a3:b4:d6:a1:0f:
                    11:9b:78:a3:19:49:dd:f5:5a:35:bd:a7:ce:7b:eb:
                    f9:bc:17:5f:f6:bc:38:d8:6c:d7:51:49:c2:83:b4:
                    b4:68:62:39:dc:b6:20:cb:62:4e:b0:b9:50:55:94:
                    9b:ad:47:78:3f:ff:fe:29:cb:5e:a8:22:16:4a:ac:
                    56:88:0d:50:4c:87:e1:18:fb:a5:fa:2b:ae:b1:42:
                    5a:65:90:8c:b8:fd:1a:7c:15:8b:a9:aa:ba:4c:78:
                    53:71:31:90:08:16:88:b5:d9:41:76:ba:ce:bf:f5:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:A6:EA:9A:60:7E:FE:6A:63:47:36:E3:E8:7E:38:70:7C:F7:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/ed9064fd-ab37-3c7a-9c1f-b5f83b35b6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0f:2e:fc:6c:44:46:7c:00:1d:42:d7:3d:65:8f:8e:b8:53:
         46:46:a4:64:67:f6:31:92:78:6a:da:8e:9b:54:d4:4a:6a:82:
         db:22:e7:e3:d6:3b:be:a6:96:e5:87:af:98:6f:8f:e4:13:eb:
         ce:3a:5a:7e:86:76:50:05:ab:96:5c:3d:fe:17:c0:d2:51:d4:
         72:0e:e5:d0:51:99:c2:2e:58:4f:40:2c:96:79:d9:1d:7c:c3:
         66:ad:85:94:67:16:4b:36:00:2f:ca:10:85:d3:b6:9d:89:b0:
         4f:44:b1:af:65:eb:91:e2:6f:ab:3a:8a:bc:64:06:3b:15:60:
         7a:17:67:db:3f:20:37:6e:67:7b:9d:7c:2b:4b:46:94:72:2d:
         d9:d0:47:3a:7a:40:d7:78:91:6e:5b:a0:a3:34:8a:bc:8c:63:
         e7:04:f6:50:b9:9c:ab:dd:d1:91:6d:34:c7:b3:33:67:58:b2:
         f7:9c:94:10:9e:a4:15:39:11:9e:62:b5:d4:09:d8:65:cd:3c:
         31:87:e8:15:9d:2a:57:94:85:14:d7:8e:7f:8a:a4:3b:0a:b0:
         63:28:c5:e5:ae:7a:5d:fa:0d:86:68:a5:aa:0e:61:d3:de:3d:
         67:95:b3:1b:08:86:50:25:d2:9d:6c:19:78:47:4a:9b:91:10:
         7f:c8:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:22 2024 by rpki-client on console-ams.rpki-client.org