Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa
File:                     e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa (raw, json)
Hash identifier:          wufMVaxJbtolrkB/T0GHuNWDrreI6mLG33mci5sG0Z8=
Subject key identifier:   D6:A9:BD:53:2B:40:88:42:C1:7C:12:E3:BC:13:BC:BB:6D:07:55:E7
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858474F4B7751373DA8FA53A500C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     271
IP address blocks:        207.23.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:77:51:37:3d:a8:fa:53:a5:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=43e8059b-f32e-42cc-91d0-b3d743f8e46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:c8:0d:94:b9:26:75:0b:a9:91:65:c3:a9:
                    a0:6f:dd:fc:34:3b:65:b2:33:2f:3a:ff:61:29:f0:
                    3c:1f:02:9e:4b:94:46:ce:da:54:b7:2d:97:95:e8:
                    02:fa:84:d8:13:70:ef:59:ce:d1:3d:47:e6:78:7d:
                    c2:7b:e9:1d:ef:00:ff:0c:ae:ce:96:42:d8:16:f1:
                    81:98:7c:7d:98:6e:0e:28:14:e0:81:cf:d5:c6:7d:
                    bc:a3:a9:f4:97:9f:4a:92:ff:e4:9b:65:68:70:92:
                    37:31:ce:4f:58:98:24:4c:4f:60:d1:89:39:b0:43:
                    ce:6c:33:6c:d9:37:32:68:cf:a1:2d:1e:df:7a:40:
                    eb:a3:02:39:7a:50:e3:90:13:d0:e5:c3:f7:cf:b9:
                    eb:ec:da:42:44:b9:3d:e8:39:91:53:b6:a3:38:4b:
                    a0:f8:af:ce:fb:55:3d:b5:7b:24:88:79:66:ec:2c:
                    63:e9:b7:fc:69:4b:aa:19:e9:92:ee:c8:7b:ca:06:
                    20:96:67:4a:03:56:aa:2c:a5:f0:39:55:a7:97:2a:
                    b9:40:8c:94:fa:0f:ab:1b:2d:26:d3:84:8c:2d:b3:
                    cd:f6:3e:35:53:6b:39:2b:b4:73:bb:01:41:01:e2:
                    9d:d8:87:83:32:bc:eb:69:6f:95:c0:ee:9a:3b:62:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:BD:53:2B:40:88:42:C1:7C:12:E3:BC:13:BC:BB:6D:07:55:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:d7:e6:39:4f:e9:d6:25:59:2f:df:da:e9:0d:a3:12:a6:
         7b:40:c2:1a:81:1e:79:05:4d:7f:d7:9e:b2:bf:33:93:eb:31:
         aa:0a:37:2e:7b:b6:ac:42:c9:e3:ec:6b:c1:db:ed:39:81:e9:
         54:87:52:a2:15:cb:5c:17:83:71:b5:ee:ad:03:3f:e2:f6:87:
         20:2c:18:ba:76:24:ad:3c:74:01:08:c8:36:06:0b:8c:92:8c:
         2a:b3:d2:2c:a9:1e:14:18:8b:38:ff:04:b8:47:1a:96:dc:1a:
         81:78:f0:a7:ff:f2:50:3e:81:65:c3:c3:c2:4f:20:0a:b0:f2:
         df:c5:1f:1f:1d:fe:65:4e:8b:fe:26:c6:6b:e5:8e:6d:95:06:
         cc:35:ae:9f:8b:b5:45:ad:31:85:79:50:f6:de:0b:64:1f:63:
         f2:8d:ce:be:f8:65:de:aa:44:28:cc:47:5b:6a:0d:85:e9:2c:
         a7:17:0f:58:44:93:14:5c:4f:49:73:97:d1:dc:a5:f0:ec:fd:
         70:89:e3:55:80:39:20:7f:e0:3f:90:76:aa:3d:71:51:8e:a9:
         62:c4:e3:b9:ad:cb:71:2b:74:4b:b9:b5:d8:17:b1:be:cc:cd:
         37:a1:f7:ee:8b:83:b9:f6:fb:58:c1:4b:12:c7:03:40:bf:57:
         5d:cd:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org