Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
File:                     f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa (raw, json)
Hash identifier:          ZmsSY6fCGXqKDc3ZZCDTOM/8wAWu3bjEm1gzyDsVJNY=
Subject key identifier:   29:E5:33:1F:6F:5A:A8:E1:31:F7:66:26:1F:3E:03:75:93:51:0B:67
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584761718BBB32037D2F440D3540
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     400238
IP address blocks:        109.73.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8b:bb:32:03:7d:2f:44:0d:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=8b0adc99-f1fc-420e-b4e9-13df5a94f13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f6:52:93:58:49:01:ad:ba:c0:89:a5:27:
                    96:8e:a6:4f:de:e6:ba:e7:7c:a4:b8:11:e7:c3:aa:
                    cf:8e:b4:cb:e8:1c:27:82:24:3e:57:bc:d5:cf:9b:
                    db:5c:07:51:f7:fa:cd:2c:42:28:c9:2a:b6:63:aa:
                    36:5c:01:23:ad:55:12:81:f5:bb:a8:71:4f:5f:4b:
                    74:87:73:a8:53:bf:70:c8:7b:bb:c4:ec:5d:0a:33:
                    d0:44:c9:82:80:97:6c:61:e5:11:bb:bf:6d:63:e9:
                    3b:93:77:d4:39:99:d4:e3:b2:87:3d:df:51:39:cf:
                    fd:42:46:14:db:91:8d:6d:47:cb:46:81:66:6e:b9:
                    3d:48:ce:2d:72:e8:49:bc:6f:bb:ec:b3:18:9f:51:
                    71:d8:1b:4c:a2:0c:14:51:27:1a:21:9a:49:cd:33:
                    10:ad:56:b1:0a:34:94:b6:3c:d3:e3:fd:06:a3:c2:
                    50:ef:20:3d:eb:e7:8c:f7:4e:c9:0a:88:ea:bf:5c:
                    4a:7a:a2:77:bf:8c:cd:7c:18:59:39:46:51:27:26:
                    67:9a:e5:62:fb:66:99:c0:33:a1:0f:eb:13:6a:24:
                    6a:5a:13:2d:25:c4:fd:2f:42:41:02:e2:db:d7:a2:
                    68:5a:58:6f:d8:d8:88:c2:a8:86:66:f6:91:7c:e9:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:33:1F:6F:5A:A8:E1:31:F7:66:26:1F:3E:03:75:93:51:0B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.73.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:a7:8e:55:bc:af:42:6c:c4:a5:84:9e:8d:fa:49:a7:e7:
         d9:65:9a:ae:69:f2:7f:08:bf:d9:a7:83:bf:31:69:cd:dd:b6:
         9e:2c:8a:47:74:b7:30:bd:61:b5:ce:5a:33:99:9f:24:e3:ea:
         f2:e5:b6:6a:a2:36:9f:c0:85:26:d8:be:e4:fd:e5:73:77:9d:
         27:d1:51:bf:b2:65:51:7c:51:ff:4b:d1:72:68:64:04:d4:c3:
         9a:d0:0d:54:f1:b4:7f:a7:b9:aa:de:2c:85:68:3d:83:00:96:
         75:16:32:7b:02:c5:36:8c:21:93:5c:6d:43:95:20:94:7f:21:
         8b:55:1d:01:7a:66:7d:ee:73:e8:ff:c2:60:a0:8b:c8:23:c9:
         28:5f:37:ac:42:0d:63:05:aa:cf:21:da:6d:b6:75:3b:38:e9:
         4b:16:14:0d:3a:d2:75:cc:72:50:7a:ff:78:03:22:ac:c0:4c:
         7f:84:ae:35:f9:96:ce:5b:1e:f4:fe:c6:19:8d:58:f5:8b:98:
         ba:ac:73:59:f2:f3:1a:0e:45:58:fd:a1:9f:a3:b0:eb:0e:a4:
         e0:7d:3f:bc:01:bb:0e:f8:09:dc:ca:7a:e2:52:48:f4:24:d0:
         26:25:f0:33:16:b0:34:b0:bd:f6:64:45:83:ed:08:99:58:ad:
         bb:6d:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org