Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa
File:                     b6d22be5-c26c-3722-8949-44a175eadd6e.roa (raw, json)
Hash identifier:          GoKWhvMPsKfHWYTefAUZPLdnFieHEt5kpTlAnDZWa/Y=
Subject key identifier:   95:F1:E5:83:2E:DE:A3:05:7D:1A:5C:63:8D:A3:B7:B9:EB:7B:5E:F6
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285847336092AF804B992991B68800
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        205.201.44.0/24 maxlen: 24
                          205.201.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:92:af:80:4b:99:29:91:b6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=7d2fc075-baa2-423e-8b98-1307722410d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:8a:cd:9b:89:13:96:0a:12:56:8a:15:d2:
                    5f:93:c5:35:18:5b:4b:b5:9c:6f:3a:81:0b:22:e6:
                    bd:f9:df:11:75:d6:d4:73:27:ab:95:f5:7c:b1:03:
                    32:6b:4a:c5:0f:3c:00:29:f2:77:2c:48:9e:1c:dc:
                    1e:a5:a8:65:5d:ab:a2:e6:b0:06:78:b2:08:06:c7:
                    ba:ff:09:ba:22:35:d2:d0:42:81:da:eb:d5:02:5c:
                    72:e3:d5:73:e9:30:6e:1a:4b:f8:68:de:48:c4:83:
                    d3:ce:85:09:f8:cb:e5:05:ff:a5:85:31:41:b5:44:
                    ce:35:9c:b6:fa:0a:2a:8c:4f:24:42:e0:df:cf:de:
                    e9:93:d5:bb:66:2d:27:0c:61:41:62:ef:b9:a2:bf:
                    c8:43:00:d6:ab:12:85:ab:0d:c0:20:c3:f1:d7:86:
                    71:45:a1:71:40:c8:07:60:f4:40:b1:75:9b:1d:61:
                    ee:94:f1:78:a0:c7:bc:1f:ba:a2:0c:cf:7b:aa:b6:
                    b1:76:77:6a:e2:20:c6:d2:0e:75:3b:bf:ad:a9:80:
                    c4:2c:02:a7:0e:a0:4e:b1:ee:bd:3b:92:b0:8f:fb:
                    f4:bd:c4:5e:12:ed:f4:25:c9:c7:91:93:13:22:73:
                    c5:ff:2d:e6:d0:61:b6:37:26:7b:49:37:cd:bb:2e:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F1:E5:83:2E:DE:A3:05:7D:1A:5C:63:8D:A3:B7:B9:EB:7B:5E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.44.0/24
                  205.201.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:8f:fd:d6:eb:3a:82:28:b7:a0:9e:b9:a2:2c:a6:07:63:8a:
         4a:7c:ba:87:3d:3e:41:29:33:5b:15:1d:e9:40:0e:c9:76:1f:
         7b:eb:c4:42:07:5c:ab:c0:58:71:f3:bf:fc:f9:25:38:da:05:
         6c:ff:ba:66:ae:c0:ee:7d:28:b4:4b:35:b4:a2:c0:ca:ad:20:
         6f:f0:28:9c:3f:f0:9b:77:13:e5:19:ec:9e:b5:5d:a3:fa:85:
         a1:83:86:66:1d:0b:cc:cf:29:9d:a9:fc:69:58:b9:79:6e:fd:
         32:6e:46:a1:7e:75:04:fe:15:96:3e:56:58:65:ad:e7:60:9b:
         91:68:c0:82:1a:4c:15:ff:ff:d1:d1:f5:1f:43:6a:d9:ef:52:
         8e:5a:83:43:c6:eb:fd:39:82:b1:0e:b1:79:f7:a7:54:bd:cb:
         ed:73:df:ae:4f:8f:6c:34:9a:07:a5:6b:86:51:d9:25:b5:a6:
         6f:40:df:ce:20:95:5b:64:ad:12:15:75:3f:da:f9:e5:8b:a8:
         ce:4a:5e:ce:68:0d:18:6b:51:33:57:9c:3a:4c:bc:7d:4b:84:
         0b:df:25:e4:b5:cf:0c:8d:92:4f:68:55:69:15:d0:a7:ac:b0:
         22:3c:8f:d8:19:a8:9b:f2:17:65:ec:c7:65:c4:3b:e1:57:52:
         64:8a:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:56 2024 by rpki-client on console-fra.rpki-client.org