Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
File:                     b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa (raw, json)
Hash identifier:          nQSwTruOl6AjFXvrYPT1x0SBISg7A8aSrBMYxVMHG80=
Subject key identifier:   12:E5:D3:DB:88:D2:47:DE:47:02:12:8C:D8:82:90:88:F2:1C:C6:B8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847845672A51D0B1B43B11DE480
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        207.230.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:72:a5:1d:0b:1b:43:b1:1d:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=26b9bb3d-3cfc-4109-9b23-d8d9f510c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:8a:ad:b0:0f:fa:ee:05:19:e5:df:af:cf:
                    5f:77:e3:01:9a:a6:8a:1f:99:47:5c:99:81:25:82:
                    f9:69:c6:0e:04:be:97:d5:7b:77:ef:72:d5:76:25:
                    bd:84:74:60:56:e4:00:dd:dd:4a:6a:51:74:03:d2:
                    22:39:e8:1b:04:df:8b:4c:53:33:03:ee:c8:7b:7f:
                    85:dd:00:96:81:3a:65:4a:c2:04:df:f2:ec:ae:fe:
                    5e:48:9f:d2:61:aa:c1:46:81:67:c7:9a:fb:84:1e:
                    10:4e:13:d3:84:7f:63:f9:11:11:53:db:88:55:33:
                    ce:0e:f0:e8:f1:15:60:2f:fa:c7:e1:06:87:a3:4e:
                    fb:3d:7a:9c:61:83:77:dc:43:f4:72:ce:0f:28:8d:
                    44:a7:12:ce:24:31:80:1e:a2:c2:62:f5:82:9b:31:
                    6a:ca:8d:40:f5:6b:a8:87:86:d3:1a:4d:75:b1:8a:
                    6d:cf:6a:71:2a:9c:21:06:8c:02:9e:be:01:c7:81:
                    8a:29:9b:30:0f:95:41:a9:56:d8:ee:e6:f3:51:8f:
                    0d:25:da:d8:62:f2:80:2c:b5:4a:d4:99:90:15:4b:
                    e0:71:68:63:0b:9f:1c:5a:66:d1:94:1e:ed:b8:33:
                    94:61:ee:fa:7a:fd:a7:1f:56:ce:7a:bf:ab:e5:05:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:D3:DB:88:D2:47:DE:47:02:12:8C:D8:82:90:88:F2:1C:C6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:97:e3:56:25:52:c5:fc:c0:8f:61:11:4a:32:4b:b5:e9:
         b6:02:3e:a8:17:39:a8:5a:c6:7a:bf:de:90:d0:4c:b3:1b:7a:
         6a:67:96:1d:69:3c:34:11:e6:82:fb:82:ff:9f:ba:85:94:18:
         d4:9f:b0:89:ac:a6:d2:80:48:0c:b3:8f:ec:d2:dc:fe:5b:b8:
         04:64:8b:9c:75:75:ec:8a:28:3c:3e:e1:62:11:f5:36:53:06:
         3a:76:d1:74:f2:0f:ab:df:38:33:b7:e8:39:d9:fa:65:d1:0e:
         85:cc:5a:4f:2a:b7:9a:f3:7e:3e:1f:02:18:81:38:64:96:cb:
         0e:82:36:7c:3a:b4:74:6f:30:9c:19:14:ad:0a:80:01:67:61:
         ca:41:59:73:89:09:ef:28:03:30:db:15:7b:75:a0:83:e1:52:
         83:57:66:42:3d:06:12:95:9e:22:c0:9b:15:f1:11:55:77:b7:
         3f:f9:96:6f:02:45:b4:dd:ee:5c:0b:31:8f:35:72:22:35:31:
         07:80:70:7a:d5:f5:aa:1a:a6:3b:f0:e8:b6:81:c0:d8:40:ec:
         14:fd:b0:6a:8a:94:fc:17:a3:e3:83:11:a8:0d:75:1f:b4:ce:
         ee:49:12:85:9f:79:12:7d:06:ab:32:d8:8f:58:43:ac:3a:02:
         f3:eb:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org