Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa
File:                     da2f45ae-85e1-393c-a63b-9abdc2736515.roa (raw, json)
Hash identifier:          bzM6IIiHT7jXIJCLZEfQpLJXpWfyyx/c2pzN6LGWN+I=
Subject key identifier:   8C:45:8C:3B:AC:FE:BE:31:90:E3:E8:35:3E:43:CF:86:7E:63:F3:8F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858473A5B9176B5AA933E6EE08E00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     19437
IP address blocks:        125.253.89.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:91:76:b5:aa:93:3e:6e:e0:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8fbde6cb-30e6-4ac7-9f19-29f4c8b170bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:73:7c:b4:e0:7e:d0:25:ab:96:ae:a7:20:
                    28:87:0d:ca:a7:3e:3b:41:f1:35:eb:57:50:e0:14:
                    b4:54:77:77:07:4a:43:31:aa:c7:4e:ef:e6:78:ae:
                    e6:a4:c5:2b:05:b1:63:9b:02:2b:20:a3:a5:ba:54:
                    96:4b:9f:f0:e0:95:20:a9:d4:5d:58:06:5c:b8:9e:
                    5e:bf:fb:39:83:d6:01:b2:6f:72:14:43:a4:fa:aa:
                    97:ae:70:ca:7e:d4:45:da:29:60:ac:91:b3:7e:11:
                    38:76:fe:1a:73:09:13:04:23:a3:d3:b8:44:7f:88:
                    85:b3:13:76:25:ca:87:07:8f:2c:27:08:8a:a8:3f:
                    b0:6b:36:50:d9:34:89:f5:6f:4d:60:99:fd:85:d4:
                    56:c9:22:13:cd:28:a7:e0:2c:ca:78:fb:5a:3f:c6:
                    4d:a6:e9:64:ee:40:fa:86:21:e2:01:84:8a:f1:f5:
                    62:bd:44:2f:de:cc:3b:2f:b1:4c:2d:9a:08:d2:9a:
                    6b:68:74:4c:3a:99:af:c7:01:5f:9a:f0:68:84:9c:
                    16:26:c5:c2:c2:fc:f8:3c:8a:9d:42:89:32:c0:d7:
                    b6:ab:99:25:5b:01:02:56:90:8f:e1:a8:e1:4b:fd:
                    c2:d3:46:c8:21:04:44:65:91:e8:31:1d:1d:af:f9:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:45:8C:3B:AC:FE:BE:31:90:E3:E8:35:3E:43:CF:86:7E:63:F3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:20:80:88:36:c2:a9:e1:05:67:50:9e:5f:c3:18:eb:61:cb:
         7e:bd:0a:f9:8d:0b:db:4a:24:cd:e7:06:9f:31:2a:2a:15:2c:
         b6:30:02:df:18:cc:c1:90:16:78:1f:bd:f0:2e:bd:0e:f4:c9:
         3f:e3:6c:ec:62:1a:35:d6:21:99:54:20:69:2c:99:26:c2:1b:
         e1:a9:c8:36:9d:5b:d1:ef:3f:bd:36:bd:d3:ec:6e:47:71:4e:
         71:db:c2:30:bb:5c:d4:34:82:f9:fe:23:50:bb:e4:ff:93:87:
         9f:18:3f:24:fa:fc:c2:1a:29:2a:72:f9:47:fd:20:b8:f9:64:
         33:f8:c2:c2:c1:02:fe:ad:68:e4:6d:a1:a6:bf:86:92:22:84:
         d2:f1:a9:e7:99:4c:10:65:9e:1d:41:38:81:35:6b:34:5c:c5:
         5f:99:89:ba:23:1f:3a:6a:74:84:48:a1:ac:ea:98:01:93:63:
         51:77:2d:ec:9d:5d:82:17:7f:a3:49:1f:be:2e:3a:6c:a6:3f:
         e1:38:95:fc:32:a8:2f:19:e1:f0:fa:3f:7c:ab:9b:19:bd:de:
         94:88:18:c7:b2:6f:07:6e:8c:8e:21:7c:da:1d:04:3c:9b:58:
         26:97:21:6d:48:b7:6b:a0:43:86:30:91:f3:90:de:a0:37:c0:
         79:98:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org