Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa
File:                     942664f6-20be-3e59-9c12-35186f7f5c0c.roa (raw, json)
Hash identifier:          SMjr9ulESdzB7mHhyO8WoZ/7jWId6OVTFy0Ja0C/jyA=
Subject key identifier:   78:F3:DE:46:64:27:7B:40:AF:D2:E1:0E:4A:AC:37:A7:1C:0D:2C:FA
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F43285847C1DF5D0BDA648ADFDF2335E0
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     393981
IP address blocks:        204.239.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5d:0b:da:64:8a:df:df:23:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=24519293-75e2-4c20-8049-6b966a91d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:08:fd:96:89:f6:d8:87:22:be:4e:d8:4c:
                    ba:d1:ba:1a:81:1b:d2:a9:69:b6:a2:12:1e:6e:2b:
                    f6:3c:c0:fe:2a:30:ea:b5:22:78:bb:0f:b4:94:f6:
                    0d:97:84:45:ad:ef:56:ff:bf:81:4e:0d:8f:e3:75:
                    78:bd:85:60:51:a7:db:e8:7f:a6:7c:a8:8e:59:4a:
                    da:43:c3:07:e2:49:d4:14:11:97:30:3a:bc:89:7e:
                    fe:b7:81:1c:b7:b4:08:6f:b6:af:bc:3c:75:9b:25:
                    dc:04:14:54:d7:f1:bb:e0:71:87:dd:6c:2e:40:8d:
                    ef:e0:85:5f:1b:c1:7d:62:45:6f:db:79:09:17:7a:
                    aa:00:e0:8a:1b:eb:b7:26:d9:3f:06:b4:de:d8:08:
                    e4:59:42:da:07:c5:35:6e:f1:c1:94:d5:f4:e8:d0:
                    84:b2:cc:ac:30:d0:ea:27:c5:9a:04:1f:97:f8:cf:
                    e1:13:63:15:5e:a8:f0:40:1a:d1:32:61:29:b3:bf:
                    bc:80:f0:08:e1:7b:e2:37:f3:18:5e:de:6c:b3:cb:
                    54:46:11:7d:c0:8b:79:02:02:4f:c1:d4:75:33:04:
                    f0:6c:40:e0:a5:bd:21:87:21:df:03:36:65:b8:8f:
                    78:d4:b9:25:f3:bc:5a:26:05:39:99:78:3a:cd:54:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F3:DE:46:64:27:7B:40:AF:D2:E1:0E:4A:AC:37:A7:1C:0D:2C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:e7:85:71:d6:36:d5:45:84:e3:7e:ef:e8:5d:79:e0:34:
         38:1d:b2:cb:54:19:19:53:7b:3f:c1:bf:4e:98:19:a5:9e:fd:
         b0:7e:40:3b:8c:5c:05:16:e7:f1:1e:ff:41:a2:fe:5f:72:a3:
         bc:0f:74:1b:c8:2f:eb:bf:09:d1:27:01:d1:06:8b:0e:a9:9f:
         4f:2e:c5:9f:ba:3f:16:4a:37:51:b3:ea:37:69:0f:3a:f9:82:
         df:60:f0:83:54:54:7b:da:c2:22:76:c9:91:75:92:d9:c9:6f:
         e0:7e:90:21:ac:93:1c:34:43:46:67:f4:16:70:0b:dd:a6:80:
         41:0d:82:f2:17:c2:df:a0:a5:22:08:bb:5a:d6:59:41:da:35:
         49:f5:32:4c:c3:40:91:26:89:ed:89:2e:e3:b5:2a:d5:a3:d7:
         ad:6d:20:05:c4:3b:e5:59:e3:72:32:8c:dd:24:f2:3b:43:7c:
         9a:bc:fb:53:ce:d0:d8:ee:b7:6f:5e:eb:00:54:e7:6d:68:06:
         34:81:dc:8e:1b:5d:41:54:29:1b:8c:ff:22:7b:a1:6f:e7:8e:
         cb:52:43:fb:d1:c3:5b:d4:08:01:97:bf:3f:b6:55:ec:ca:0a:
         38:6e:7d:3e:56:b1:18:87:15:cf:db:fc:6e:1d:42:db:27:86:
         2c:71:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org