Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa
File:                     e002c723-f552-35d5-80c3-df9a24ce1276.roa (raw, json)
Hash identifier:          2Q4ecUsnjnYrcYX0bWOLb2FyvnsboM5yWtOfErOUlwk=
Subject key identifier:   25:87:0E:36:B1:22:7F:8A:BD:22:31:72:45:3B:D6:08:D5:86:54:A7
Certificate issuer:       /CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1
Certificate serial:       010D0C9F432858472B007C711D7079792C26FE00
Authority key identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     63428
IP address blocks:        104.255.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:7c:71:1d:70:79:79:2c:26:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=307bc3cc-f8da-4f53-b934-babd8d87784f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:5a:92:82:3b:c0:5e:99:c1:c6:ef:6a:ba:
                    3a:82:5e:33:24:98:16:0b:ef:9d:77:f5:a8:ba:34:
                    4d:62:66:55:05:50:83:a4:ad:a9:4e:94:ba:36:de:
                    33:05:83:89:3a:c2:35:e7:44:d0:39:f3:b2:ba:c0:
                    42:dd:ab:0f:16:5b:a4:e9:83:b8:7a:a2:b3:f5:a1:
                    b0:dc:9d:84:6d:84:29:fe:d5:1e:0b:ec:56:00:0c:
                    5f:0f:7c:f1:38:31:b9:48:3a:98:25:c2:2b:3b:7c:
                    0b:76:51:40:f0:98:80:37:10:39:e5:94:80:aa:0c:
                    9a:f0:09:31:2a:6b:d8:af:92:6d:a4:6e:22:ef:45:
                    81:ea:e6:13:d3:ff:de:84:10:7b:11:30:77:46:78:
                    ab:c8:d8:d9:a7:dd:82:cc:f5:d7:51:c4:f0:d5:1b:
                    24:5b:f2:92:a4:c8:06:7b:21:c8:cb:fb:f5:4a:a3:
                    b1:aa:53:1d:cd:5c:d6:ff:b5:30:93:d3:25:01:14:
                    fe:27:77:3f:77:30:8f:2e:43:12:33:bf:00:93:98:
                    4a:f3:e9:a4:65:55:c0:2a:c3:df:e2:bd:f8:d0:6a:
                    7f:e4:04:90:d7:fa:32:92:46:43:46:a6:82:cc:8a:
                    a0:d1:48:76:ea:96:83:80:d7:c3:ab:15:b4:40:ce:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:0E:36:B1:22:7F:8A:BD:22:31:72:45:3B:D6:08:D5:86:54:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.crl

            X509v3 Authority Key Identifier:
                keyid:07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:1c:d6:37:33:2c:82:f9:5e:0e:68:ea:cc:15:44:c5:b6:
         0e:5b:f1:87:e5:69:c9:c6:d6:3d:40:37:e3:c2:42:37:b1:c5:
         85:a5:a0:da:dd:31:46:9d:04:b9:5a:f4:4b:65:47:54:7a:72:
         72:38:ab:ae:dd:43:6f:b2:56:a5:91:dc:45:67:a7:68:66:ba:
         c6:f0:8c:78:f5:83:ab:ed:76:d2:93:94:df:62:1b:dc:21:01:
         b0:cb:d9:c6:bb:89:99:af:65:be:c3:de:5d:88:8e:52:6e:15:
         55:d8:bf:23:35:42:c7:74:de:df:97:da:bf:0a:75:51:bd:06:
         2c:33:06:14:3c:c2:32:39:c5:0a:9b:26:20:3a:c6:30:00:e3:
         c7:90:55:2b:67:4a:33:4a:5f:70:f9:02:49:7a:0b:0a:ca:8a:
         81:e5:07:9e:3d:4d:64:fe:3d:16:9f:24:de:4d:a9:10:91:b1:
         9d:25:fd:12:a5:a5:e7:94:ba:ed:34:5a:c5:9f:46:d6:d5:28:
         5d:95:70:47:9e:d4:09:f4:6a:e8:85:c9:8d:dc:93:72:90:ce:
         5d:6f:a8:83:ef:78:56:40:a5:a0:4d:51:3b:6b:86:c6:d4:5d:
         6f:4a:4d:9a:3f:6b:83:dc:a5:ed:e1:0d:57:97:1f:4b:63:54:
         ba:00:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:07 2024 by rpki-client on console-fra.rpki-client.org