Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ff248724-9a95-3389-978f-5a2089b9c978.roa
File:                     ff248724-9a95-3389-978f-5a2089b9c978.roa (raw, json)
Hash identifier:          BGnvGOmIwblc/kePGvEX4YfDxTWfKzbmw/9Hn6yMOTo=
Subject key identifier:   96:8C:D8:4C:36:D8:A0:AF:B5:DC:59:99:D8:2C:F0:DB:8D:85:79:53
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847B7FBF9F3B45E18F31F765300
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ff248724-9a95-3389-978f-5a2089b9c978.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     16532
IP address blocks:        205.236.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f9:f3:b4:5e:18:f3:1f:76:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=3138f016-f348-4b2e-82a5-a6814f6f4578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:85:cd:b0:61:78:fb:c4:48:6b:ac:85:a5:
                    2e:39:56:35:32:94:43:15:64:a4:dd:04:c0:a9:86:
                    d5:60:15:0c:40:54:f1:02:24:d7:a4:e6:52:1b:b7:
                    08:a0:85:23:ce:c8:2a:e2:db:79:e5:02:89:ab:a3:
                    a5:12:55:b2:fe:24:92:be:ee:56:19:55:7e:42:ad:
                    09:3f:7d:a6:4d:27:83:91:9b:6e:4b:4e:c1:60:3c:
                    99:08:d3:05:4b:21:83:00:1c:6a:56:54:c2:dd:b7:
                    a7:75:59:42:bc:b5:73:d6:48:3f:f3:9e:c0:a5:34:
                    8f:af:6f:aa:fd:be:2e:b0:dd:64:39:ff:41:34:39:
                    7f:31:e6:aa:0b:01:4d:ad:c8:30:a0:f9:40:b4:4b:
                    2b:c6:7f:ff:fd:f5:be:94:11:83:b3:de:57:27:9f:
                    85:fa:07:7c:8b:3c:c4:01:94:80:ee:97:66:1f:1d:
                    17:a0:43:b3:66:56:59:77:6a:ed:5f:1d:9d:41:f3:
                    f5:c9:91:76:f4:40:e8:38:0b:31:65:f6:1e:3b:04:
                    d7:94:67:fe:20:bf:b1:52:e4:92:15:2f:e0:ef:1d:
                    a8:21:d6:99:7f:7c:4a:2f:2d:71:d3:da:4f:d3:12:
                    41:d7:e4:5a:e3:71:e8:ee:29:84:76:7b:88:9b:33:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:D8:4C:36:D8:A0:AF:B5:DC:59:99:D8:2C:F0:DB:8D:85:79:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/ff248724-9a95-3389-978f-5a2089b9c978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:50:bf:d8:ab:17:a5:54:77:7a:ee:37:89:81:ca:11:09:
         f8:14:e1:10:be:46:0a:bb:3c:08:ba:0d:ad:32:3d:85:1c:4b:
         51:c3:eb:0e:20:d4:87:f3:7f:ec:94:5a:4c:a8:79:70:e3:a5:
         33:2d:f6:6f:06:2e:33:bb:34:12:14:8a:0d:67:42:07:2f:ef:
         bf:30:ef:76:64:2e:c2:61:07:bb:44:4f:dc:72:52:cd:a7:59:
         4c:b7:fc:3a:d3:f2:09:50:d2:fe:93:6b:63:35:bf:cc:94:c4:
         d4:b6:04:4c:2c:94:6b:99:d1:7f:43:c6:7d:ca:9d:45:c5:5c:
         21:9a:4e:d2:32:11:cc:95:23:b7:e1:db:92:22:c4:6c:5b:33:
         81:22:70:13:52:cb:d9:27:3b:aa:02:b4:f4:7a:07:8a:c3:79:
         91:e7:6b:ae:4d:07:b5:96:29:98:ef:ef:8b:08:ff:c3:93:9b:
         23:63:a8:e5:20:d8:e3:96:1b:a2:bd:b4:0f:ac:ad:87:f2:41:
         b6:27:ad:e9:89:ec:45:c4:d6:ae:f2:e5:6e:ef:ff:d9:a1:3c:
         15:9a:54:78:05:4a:9c:f3:4e:ea:38:5e:b8:e5:0d:ed:c2:71:
         eb:4c:11:92:bd:80:fa:23:46:01:15:4f:0a:7d:c9:0c:7f:90:
         77:39:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org