Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
File:                     f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json)
Hash identifier:          1bOwhwPtuD9udU1yBaDxUQ/+XT2e0mIpJmPwpjWp2as=
Subject key identifier:   F8:9E:8C:07:9C:BC:C9:62:46:8C:B8:56:AB:56:C6:37:1A:BD:C5:72
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584785BBADB0A7932F2F708AA480
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     16604
IP address blocks:        209.124.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ad:b0:a7:93:2f:2f:70:8a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=75984894-902b-4be0-877c-754b9b1cc1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:97:3b:37:c4:fc:18:39:69:9b:af:d6:6a:
                    76:c6:f9:69:4b:d8:d9:d6:5a:2a:7a:ad:95:23:1d:
                    cf:12:8d:c5:f0:11:4d:30:d6:fb:a8:94:fb:c3:83:
                    93:75:b8:6f:41:10:b7:43:1b:89:c3:af:21:b2:23:
                    d0:6b:4f:d7:da:fc:34:02:e5:56:18:fd:3e:3c:c7:
                    7d:5b:f4:be:3b:fe:f4:53:84:a6:63:00:46:48:db:
                    63:97:de:35:26:ea:c7:ee:3d:01:54:d5:da:84:c8:
                    33:1b:8b:3e:54:14:39:59:4f:04:75:01:f3:62:35:
                    88:a9:cb:11:48:c4:2a:09:8e:fe:4a:b4:df:02:07:
                    78:6b:f6:e6:9d:b1:ec:20:47:f2:1f:24:f5:eb:37:
                    f9:ee:3e:72:cd:61:1a:b0:9e:50:97:c6:71:c0:d3:
                    d5:01:fc:f3:2f:53:b3:8b:3b:39:51:68:1c:97:78:
                    f0:d7:24:ac:59:7f:f9:16:08:fe:e2:00:d1:48:65:
                    a3:d7:30:7a:f6:33:3d:15:60:8e:8f:e8:ec:b6:1f:
                    1d:33:a0:07:ac:3e:67:e6:bc:91:33:6d:f2:c6:8b:
                    00:ea:1c:37:be:98:6b:9f:4b:00:48:56:f2:a1:14:
                    42:a2:10:75:06:81:7f:0e:b9:a2:9c:f0:32:5a:5e:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9E:8C:07:9C:BC:C9:62:46:8C:B8:56:AB:56:C6:37:1A:BD:C5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:62:f9:68:12:c8:9b:0b:1d:41:5f:e4:75:93:95:3d:c4:a9:
         42:25:52:b5:dc:53:58:8b:94:9a:53:ed:6c:d0:2e:bf:2c:77:
         53:93:2f:f3:d3:e3:a9:6a:b9:a2:5d:a3:0a:5d:8a:37:99:48:
         61:81:6c:9a:43:8e:89:ab:08:2d:0d:f5:49:24:a8:6a:8f:c0:
         4c:a0:bf:5d:eb:84:5a:1e:19:cd:5d:1f:63:54:48:ea:87:fb:
         c2:5f:98:29:ad:0e:20:55:b0:02:23:56:81:f4:3b:cd:e3:30:
         32:b4:bb:2d:5f:f5:78:20:9a:60:0f:48:49:c3:f4:20:6b:b3:
         e2:6e:20:d0:11:99:c6:0e:98:ff:6b:78:5a:e0:55:df:59:8e:
         59:ea:fa:c5:12:03:22:c4:e1:a2:cd:18:88:60:af:5a:78:f9:
         6f:d0:42:f6:65:10:ef:58:7b:9e:40:4b:3e:c2:12:83:3a:4e:
         5b:fd:52:96:e1:c5:48:40:87:81:a4:f6:e7:1f:47:3e:02:a5:
         50:5f:6a:df:04:f6:2b:da:e0:c2:d8:ed:0e:65:15:b0:e4:a6:
         9f:6f:d2:b0:fc:a5:ea:35:3f:4c:59:41:51:55:ec:1e:a5:b8:
         67:bd:0f:94:f0:3c:1a:64:e6:0c:9f:22:99:8a:ab:ec:fb:21:
         da:ae:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org