Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa
File:                     d7175206-08f3-3c69-a0cf-cef08664a79f.roa (raw, json)
Hash identifier:          ceSFgdCSMDb62tsHARY6NeOEHTKIhAAoc9DNEVO3Bk8=
Subject key identifier:   F2:1A:43:61:F5:A5:01:27:B3:E0:FF:8A:3C:B5:F2:D4:26:4A:6B:DC
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474850BA514434A31838CD1250
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     20454
IP address blocks:        209.188.28.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:ba:51:44:34:a3:18:38:cd:12:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=120d96a6-06f5-49bf-907d-1664e3b9ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:81:2f:ae:1c:61:9c:56:65:92:66:4e:d1:
                    90:c3:f4:28:36:59:0b:ac:7e:04:bc:89:c6:0a:9e:
                    91:6a:d1:39:92:ee:ee:3f:f8:e9:bc:c6:c4:fd:4a:
                    62:3a:86:46:6d:76:89:ec:69:2e:d1:93:6d:12:0b:
                    1b:f0:41:1e:8b:66:48:6c:96:af:0f:7f:6f:bf:1d:
                    be:6d:bb:d1:c9:c6:36:55:f6:cc:42:3b:27:39:7a:
                    ee:52:39:3b:65:dc:70:a5:28:a7:e7:f6:8d:c5:a9:
                    a1:95:d7:97:f6:d8:63:a9:8b:e0:c5:cc:1a:9d:c7:
                    5f:bc:b9:16:ac:57:06:e9:b0:0d:c9:75:15:14:57:
                    eb:b1:5d:42:ea:ab:b9:45:49:41:2f:d7:e8:ea:c3:
                    e6:5c:12:2d:82:29:32:e0:19:04:9d:5f:3d:4c:ac:
                    e9:84:4b:60:f9:01:b2:0f:d9:a3:68:89:b7:a9:e8:
                    41:d2:ab:fd:17:ac:a8:54:8a:ca:ed:89:89:fe:02:
                    c1:27:ad:45:29:38:8a:3b:f5:7a:25:ad:77:38:6e:
                    50:54:a2:9a:e8:32:26:a5:40:f0:ab:ad:5d:2c:9b:
                    7a:67:8a:5d:98:7e:2d:95:84:84:9d:e1:f4:31:22:
                    93:84:bc:26:c5:a3:96:9c:26:92:4b:cf:7e:a1:e7:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:43:61:F5:A5:01:27:B3:E0:FF:8A:3C:B5:F2:D4:26:4A:6B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7175206-08f3-3c69-a0cf-cef08664a79f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:9a:b1:88:80:9d:45:20:57:a2:35:fc:1d:92:9b:a7:62:
         51:f5:52:9a:be:6c:59:36:2d:f8:65:e2:f0:cb:62:32:ea:1d:
         2c:21:af:39:2c:f6:26:2a:d4:f8:24:c1:a2:fa:f0:6c:cc:ad:
         c2:eb:c3:78:7d:3b:ea:1d:77:0f:74:ed:ac:0e:e8:78:9d:e8:
         ad:ab:a1:0b:fb:24:00:58:6f:b1:7b:1d:74:f9:07:bd:17:46:
         3d:0e:28:59:ea:88:59:53:c2:cd:a4:0f:98:82:4a:f9:df:bd:
         03:67:17:ab:f9:fd:65:f2:f3:9d:b6:e7:90:1e:8c:36:61:78:
         d7:f5:f5:a1:5e:2a:4a:16:42:bc:c6:5e:96:2d:ea:43:dd:d9:
         8c:8a:bd:a4:dc:e3:ba:45:55:a1:7c:7d:bc:53:96:21:c4:9f:
         8e:ea:9c:f7:44:2a:00:44:41:8e:17:02:e2:cc:5b:9b:97:70:
         16:1a:ef:61:73:1f:cb:86:ec:65:c6:2c:91:06:64:e3:69:01:
         f1:2d:e6:be:3e:84:22:ad:d0:c4:8c:79:01:dd:a2:18:5a:e8:
         d7:63:eb:1a:09:db:07:86:4d:d5:64:7f:38:ae:d1:89:86:c7:
         4c:01:c5:30:7d:89:49:1f:e1:4f:67:80:04:4f:7c:be:04:cb:
         96:ce:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:56 2024 by rpki-client on console-ams.rpki-client.org