Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa
File:                     c1c46925-3194-311a-bf74-90ade789f982.roa (raw, json)
Hash identifier:          ajbTmhO0uwCSoxHMt7cz9dl2r7lK3Yl2hle1rPVFpMw=
Subject key identifier:   D8:88:08:1C:2C:BF:50:A9:E6:2A:77:1F:AD:A3:EA:01:4B:3D:D8:20
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584716105684C4FF32AB492301D4
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     209854
IP address blocks:        207.230.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:56:84:c4:ff:32:ab:49:23:01:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=1035a863-3b2e-4a89-b9dd-5d3882a63daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:0e:57:96:b3:e2:11:5e:bf:a3:32:c5:cb:
                    16:b3:31:f3:66:fa:d4:d9:29:01:fd:67:f1:11:22:
                    42:20:eb:a1:31:f5:9a:7e:c3:e6:b8:10:14:66:55:
                    1e:4b:e6:62:44:bf:71:6d:65:37:be:ed:4e:8a:b5:
                    73:58:51:a6:65:bb:0f:72:de:37:9f:df:a7:86:0b:
                    a3:81:67:3e:78:8d:78:39:5b:b9:87:b1:8e:5a:ea:
                    41:2d:6b:cc:39:00:cd:3b:f3:11:96:c5:ef:c4:e3:
                    b6:d0:12:04:69:31:46:b3:4d:b0:b5:5a:6a:f0:db:
                    c0:d3:e2:71:45:7d:78:29:c1:d0:c6:57:77:34:89:
                    91:a2:5e:37:c2:8f:0a:8d:1e:7a:fa:0c:15:40:8c:
                    e0:44:f5:80:c8:76:74:3b:c9:96:bc:30:b9:0e:6a:
                    e4:d8:cf:75:4b:41:7e:60:a2:5e:e5:68:d1:a8:51:
                    b3:26:41:33:03:25:d1:12:3c:5f:66:44:bf:23:84:
                    76:6f:78:a6:68:da:2b:fb:82:4c:a0:68:4e:58:31:
                    83:01:91:1b:2e:3b:e0:79:ee:97:27:f6:62:92:f9:
                    f7:b8:b7:88:56:28:d1:df:90:ad:0b:38:e5:d8:df:
                    df:fd:d5:eb:58:95:f0:b6:0c:10:5d:d6:a0:e5:d3:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:08:1C:2C:BF:50:A9:E6:2A:77:1F:AD:A3:EA:01:4B:3D:D8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:f8:8d:6b:0c:a8:3d:a5:91:b9:2b:2c:f0:8e:74:91:e6:
         a0:cf:85:08:c9:9e:86:be:16:1f:8a:1e:59:12:e4:a0:00:70:
         55:17:ec:4b:fb:4d:f3:b5:73:be:a5:66:11:c4:c4:69:1d:3e:
         ee:f0:6b:b4:f1:42:98:a7:34:28:1b:3e:db:02:10:e0:bb:70:
         94:6e:e5:5e:b7:7f:91:4a:76:1a:63:7b:d6:51:5b:37:c1:5e:
         1b:98:ec:d1:fb:ae:d7:72:05:b7:52:9d:2f:b8:85:ab:37:08:
         3c:21:4f:aa:aa:0b:08:a5:4b:2b:d8:d6:11:8c:bd:71:5e:65:
         82:78:dc:78:bc:69:06:56:05:9e:f6:8e:cb:65:bb:71:f6:71:
         57:c1:68:bb:b3:24:f5:09:6c:a9:0a:eb:b3:95:09:47:f1:1b:
         d9:5e:7c:b3:9e:d5:61:d4:8e:63:1f:a8:ba:c0:08:6b:9f:b7:
         8d:9d:c3:6a:79:b9:13:55:1f:cd:7d:4a:6e:5b:c3:9e:56:03:
         8b:d3:76:d6:d8:f4:7a:94:ae:01:8c:07:ae:01:5b:4e:bf:9b:
         9f:51:53:0a:91:22:57:17:ae:04:9a:59:41:0e:64:a4:a7:15:
         ee:70:33:ac:5b:25:15:54:73:24:1e:f2:92:3e:89:02:0e:dd:
         cd:ec:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org