Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa
File:                     7f1f3909-934d-32ab-bd49-5209ad0fade0.roa (raw, json)
Hash identifier:          yllnNmumZheFoLKiyFmZUhAh6HwVjmQkewQeVNBEuxQ=
Subject key identifier:   C8:4E:43:CD:35:7C:16:45:24:17:6F:56:89:3B:0D:0B:9C:A2:C4:4C
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847A30BFBE69369321D5D4C6D40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     271
IP address blocks:        209.87.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fb:e6:93:69:32:1d:5d:4c:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=5aff3dd0-80f4-49c4-8c87-202a02798f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:15:73:eb:e8:a4:50:f8:a7:45:66:e1:a1:
                    b0:2a:7e:b0:3e:97:e2:49:a3:72:d9:68:40:6d:9c:
                    72:a5:2a:62:a2:34:87:4a:f7:b4:1d:38:f9:9a:ca:
                    6d:35:84:45:f2:c2:92:96:5e:61:fb:9c:13:14:38:
                    72:af:70:84:f7:7f:84:34:09:64:10:27:85:31:63:
                    00:56:0b:88:91:c0:0a:59:86:30:9f:1a:70:85:e2:
                    48:3d:5f:2e:e5:73:a4:3f:70:4b:45:2d:06:9d:1c:
                    b2:97:f1:db:e8:21:91:ca:18:38:6d:7d:97:6e:1b:
                    db:b8:0f:6e:fa:b7:6e:b7:52:6d:74:f5:60:b2:dc:
                    f7:e6:4c:06:8b:23:7e:14:d7:d7:35:76:9c:0a:f4:
                    f9:be:a2:1c:5c:41:19:1a:19:07:2e:06:a7:8b:13:
                    bd:43:af:84:4c:82:e9:ce:be:e1:9f:89:b9:00:9c:
                    21:a1:87:20:92:c8:e4:3d:13:a7:e0:8c:55:ae:af:
                    60:e6:fe:9c:75:a9:02:c1:85:b3:95:f4:31:c8:1e:
                    a2:81:55:23:cb:fc:4d:38:f1:e5:84:dc:91:4e:b7:
                    53:d1:f7:94:a9:93:1a:5f:e7:61:ae:6e:86:76:c6:
                    b2:fe:48:67:b8:67:fd:d8:d3:9b:4d:fc:39:bf:ff:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:43:CD:35:7C:16:45:24:17:6F:56:89:3B:0D:0B:9C:A2:C4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:86:28:b2:3c:f2:3c:2d:f2:ed:a3:73:54:23:1c:f5:6c:
         26:f1:c3:16:d0:10:f2:5a:30:2b:3d:18:a8:a0:a1:73:a8:05:
         b0:23:27:2f:91:f6:d9:93:91:33:f3:5c:fc:42:6b:39:f9:e4:
         11:66:81:10:66:08:a3:39:40:2e:25:78:62:ee:60:e1:52:bc:
         f6:1c:36:0e:40:a7:ce:bc:5d:ab:fa:ec:51:4d:33:d3:3b:b8:
         c6:f1:08:c3:b6:b5:ae:d5:48:2b:58:9c:44:d1:ee:69:f7:2d:
         ba:42:82:08:7a:1b:42:83:8b:4f:4f:7b:9e:c8:48:53:7b:77:
         f6:dc:36:05:3c:48:d0:c1:7d:59:d8:d7:5f:a6:b8:28:42:e1:
         2a:05:c1:c4:f6:b6:db:04:52:28:16:d4:95:31:ca:c4:f2:b3:
         d3:dc:a4:5e:30:51:ee:f9:48:01:36:66:7c:26:74:5e:bd:02:
         4f:b9:aa:92:54:cd:04:82:6a:cf:95:05:19:c3:10:64:eb:db:
         66:4a:dd:d0:72:b5:8a:9c:fe:c3:46:6c:44:36:da:be:f9:97:
         2d:aa:6b:03:1b:38:b8:69:f8:29:57:03:55:b4:2e:0d:1b:55:
         ee:94:9e:b7:ba:bc:57:31:8e:69:22:22:26:ad:e7:35:01:c8:
         96:ec:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org