Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa
File:                     e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa (raw, json)
Hash identifier:          LfJI2iE3guYFUl+5+HZQmIrEdrJELL1k79hvjV4VjKo=
Subject key identifier:   4C:AB:88:14:7A:5A:32:01:FC:C5:E6:5C:5A:C7:12:99:3C:35:86:2D
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847BD915BAD4D0CA7E270576E00
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     16532
IP address blocks:        205.233.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5b:ad:4d:0c:a7:e2:70:57:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=a88e9c68-87d4-4071-b7c3-9e018e8def91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:16:67:34:89:a4:61:3c:6e:34:df:e0:75:
                    7a:75:68:54:f7:20:97:2a:02:d3:11:03:4b:56:04:
                    42:ff:94:e3:b7:a3:f1:be:69:6b:c0:33:69:e8:3f:
                    ee:c6:52:22:b2:66:31:eb:8c:21:1e:3d:45:fb:01:
                    38:cb:d6:5c:03:cc:29:0e:34:28:12:2b:b5:b3:e7:
                    f9:ff:56:6d:f6:07:0c:89:c2:09:d1:1e:10:a9:7f:
                    65:2e:77:8f:70:f1:90:9f:cc:6f:f3:06:6f:98:09:
                    20:10:19:16:7b:a3:e1:b3:28:33:f1:03:29:ae:c2:
                    60:8e:16:70:bb:77:30:97:65:5b:00:d2:a1:82:81:
                    bd:eb:fb:c8:6b:7d:8d:c8:01:ba:7e:a9:54:78:b0:
                    36:49:cf:32:8d:e4:94:f9:84:0d:63:6d:f0:1b:e4:
                    f2:2c:7a:5e:02:4f:76:f5:f8:12:4f:a0:be:2a:35:
                    3d:90:9b:65:22:c2:5b:37:77:f3:c0:87:68:0c:c9:
                    68:f0:fe:77:51:a3:9c:3e:d0:08:2a:42:80:e9:42:
                    f3:51:54:b5:82:26:01:68:7a:d1:72:0a:2f:49:ec:
                    aa:0c:86:d8:c9:3f:40:73:4e:ea:33:60:00:ee:31:
                    05:b7:ea:39:b2:30:7e:3a:3b:89:03:c3:e7:26:1e:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:88:14:7A:5A:32:01:FC:C5:E6:5C:5A:C7:12:99:3C:35:86:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:da:7d:6b:8d:75:de:ed:d7:d2:d5:ab:bd:90:90:47:cf:b6:
         f9:68:d0:f7:6f:98:93:7f:1e:21:ab:3b:95:2e:45:4f:b2:b8:
         de:05:34:58:f9:7d:0f:4e:22:e8:6d:4c:1a:23:66:26:ad:a6:
         0c:21:e0:af:03:96:fa:be:30:e3:a6:80:9a:ed:df:8c:e1:da:
         1d:de:d4:1b:aa:26:bd:5a:54:db:56:3d:fd:b2:e7:7d:88:36:
         92:05:a8:99:e0:4a:d4:72:b4:82:52:e0:81:e9:d0:ee:27:24:
         e6:a3:70:fe:50:e8:ce:32:73:de:ba:4e:4c:ba:d2:29:15:41:
         0a:fc:44:ef:99:a2:f5:f1:df:0b:93:b9:1e:b4:fe:9a:14:6b:
         d5:77:80:66:68:2c:21:02:1d:f1:3a:c5:6f:76:7b:9a:14:1f:
         c0:37:ef:ef:d8:7a:32:27:a2:a5:d7:49:50:66:ee:60:ce:11:
         6e:c5:c5:be:4a:00:71:4b:52:5b:76:19:97:a5:32:83:7c:18:
         8a:7f:9a:ff:4b:92:7f:48:4c:30:b4:4f:d6:0c:01:29:ca:67:
         2d:ef:68:c6:28:5f:32:f2:e2:9c:d6:64:2e:44:11:d0:f4:d0:
         12:e7:f6:dc:a3:f6:49:b2:84:5c:e2:77:9d:b1:87:9e:bc:62:
         fa:9c:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org