Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
File:                     0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa (raw, json)
Hash identifier:          Uxd0QthS0xPYRpI8V4IX96egF5DXBh9bbVXpuxLfj0A=
Subject key identifier:   07:E0:CC:D7:CE:D1:22:39:5C:BA:29:C9:10:B2:E5:04:1C:70:BF:A8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858474C80C4C49AAD935CE4F4EAC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     212384
IP address blocks:        173.211.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c4:c4:9a:ad:93:5c:e4:f4:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=0f9cee93-1b43-4e3b-9f01-f7339cb9cd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:8f:25:b8:d5:cc:a7:67:76:21:64:25:85:
                    8f:c6:4f:03:bb:34:c6:0f:c7:ec:3a:28:73:46:03:
                    5c:d9:92:d0:5e:ed:fa:f9:bd:82:7d:f8:0c:79:59:
                    2a:c8:a1:a6:c9:cf:f3:54:4d:68:d8:45:32:d5:4e:
                    59:ce:38:f6:29:dc:9f:db:61:dd:be:39:3e:f7:29:
                    fe:07:63:6c:2e:89:dd:a4:b8:89:c6:af:dd:63:bb:
                    35:2f:21:e0:63:30:fa:48:d5:51:db:7d:ca:a6:11:
                    7c:9c:70:e2:f7:59:92:6a:b3:be:b1:26:12:c7:84:
                    32:f9:23:97:4a:59:ec:d0:8f:a7:9b:88:90:fe:9b:
                    e5:0b:19:e0:cf:c1:8c:fd:5a:7b:ad:15:4d:03:61:
                    2e:93:11:13:41:2a:c6:88:e3:66:80:fd:da:43:d8:
                    0d:4a:03:4e:75:38:98:49:6a:17:7a:77:de:2a:cc:
                    6f:56:9f:b9:01:ab:05:5f:ba:d7:7a:f7:2a:7a:f5:
                    d9:e5:ab:89:7a:5a:89:3e:94:4b:36:3e:05:41:6d:
                    d5:ce:bb:bf:07:be:8f:51:36:3f:9f:67:0e:14:c8:
                    0b:6c:4f:a0:86:bf:89:89:13:49:f4:14:c8:26:70:
                    27:4c:3e:a3:25:30:20:85:93:c2:5e:51:a7:0a:82:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E0:CC:D7:CE:D1:22:39:5C:BA:29:C9:10:B2:E5:04:1C:70:BF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:66:d3:43:91:c0:26:a3:20:e5:7d:17:f2:c4:dd:06:8a:a9:
         8b:df:14:d4:58:85:73:23:af:07:11:eb:c5:54:41:58:a7:92:
         85:f7:f9:a8:d8:e3:45:76:ba:bc:d8:7b:ea:88:99:64:da:73:
         83:62:cf:01:ae:eb:ce:03:60:bd:f1:7f:0f:42:76:7e:b5:fe:
         69:0f:c8:40:b7:0d:24:e3:39:5a:1d:de:ee:43:7f:8c:f4:45:
         ec:d5:28:5d:50:41:26:4a:5e:c4:46:fb:be:e8:61:f5:ed:7e:
         39:c5:e6:c2:87:aa:45:41:0c:b5:bb:c1:43:ec:90:3a:1e:f2:
         90:61:c1:ac:89:a4:a7:99:af:cb:51:47:9c:c5:ba:4b:2c:61:
         93:7d:32:d3:62:e3:45:46:95:ae:df:e5:06:f3:6f:24:23:23:
         25:34:be:33:65:8c:f7:1b:13:1e:3d:0b:30:c8:66:84:d8:1a:
         f4:64:e1:90:27:35:03:11:28:ca:2a:5b:a6:59:8c:06:c6:1a:
         bb:af:2c:e7:de:c1:b2:7d:1d:11:22:b8:da:28:26:01:e9:c1:
         8e:c6:7b:e2:a6:ba:bf:32:5b:85:2e:61:c2:75:08:f1:13:83:
         03:6a:cb:72:4f:fe:8e:d1:8b:e2:59:3f:7d:c3:33:f8:22:98:
         84:d8:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:26 2024 by rpki-client on console-fra.rpki-client.org