Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
File:                     40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa (raw, json)
Hash identifier:          FeAVOugQ16bp0lBAHsa/iA82OF1J72sFuPS+KRy4CEg=
Subject key identifier:   B8:B1:2A:7B:91:94:84:CC:52:0A:5D:7D:CC:27:3D:FB:67:52:35:1D
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F432858473D2602EBA5C3348620807698
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     395347
IP address blocks:        97.107.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:02:eb:a5:c3:34:86:20:80:76:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=1b13e2ce-a303-4f17-b5bb-108f7da87bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:62:49:90:41:1e:a8:c6:d5:95:fe:21:c9:
                    e4:54:43:b5:d1:fb:4e:07:35:3f:93:0f:8b:94:54:
                    f1:52:0c:95:69:7f:a8:8f:7f:0d:98:52:71:e9:1a:
                    ac:83:11:fb:4d:7e:55:38:64:07:78:68:6b:a7:25:
                    67:c6:aa:0f:e3:2a:1e:0d:fe:e8:cf:03:cd:8b:da:
                    4d:2f:d6:90:5d:80:e4:4a:5c:f0:ea:61:c1:18:0c:
                    cf:a8:bc:da:b6:4f:f1:d6:59:1d:29:78:c2:58:31:
                    b6:1c:63:b4:1b:6e:50:cc:35:f3:1f:49:1f:fc:65:
                    42:1a:28:76:38:2f:84:50:02:25:c7:38:ac:3b:a0:
                    04:93:48:fd:d1:7b:fb:8a:54:b8:16:3e:b5:57:b0:
                    81:41:51:ec:6c:b4:16:2b:31:43:5d:25:3a:f1:67:
                    83:11:f2:9e:1f:50:4d:a8:56:34:37:92:f6:fb:57:
                    09:ba:79:ea:39:91:f3:fb:d2:78:0e:f2:e3:ee:d0:
                    8b:e5:b7:db:ce:6c:3e:a3:5a:68:d8:07:cf:f7:ea:
                    49:0d:6b:a3:38:50:f2:d1:6d:75:b7:55:61:7a:23:
                    76:af:a5:35:04:f5:4b:17:36:40:4c:c9:b2:a3:e2:
                    29:e2:ec:90:9a:77:7f:62:41:03:9c:95:d1:7f:72:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:2A:7B:91:94:84:CC:52:0A:5D:7D:CC:27:3D:FB:67:52:35:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:58:83:3e:5d:4d:2e:3a:31:40:6e:fe:8e:75:fd:f5:d7:
         62:0b:62:2d:0a:f9:5b:d9:bd:58:eb:a9:e4:b9:11:ad:bc:2d:
         b0:a4:a4:9a:67:b4:da:c6:5c:1d:18:9c:39:56:b9:ea:71:79:
         f4:f7:b2:31:90:2c:99:08:ab:74:db:1f:43:0d:72:f1:97:17:
         22:c3:29:81:31:11:32:e4:1d:0d:44:0f:6f:ea:8c:cd:4b:f5:
         bb:88:3a:c0:d1:ec:39:35:9f:ca:9e:44:22:fb:62:a4:d0:ef:
         12:1e:a5:c0:23:34:16:e5:0c:1a:0f:60:e8:23:3e:c1:9d:27:
         d0:ed:17:71:37:e9:ce:16:18:4d:c8:7c:53:64:46:e8:5a:00:
         72:97:72:ab:25:c4:85:bd:db:0d:b1:ad:3c:ba:ea:dc:16:3f:
         f2:a7:d8:c4:b4:69:a8:21:bd:34:1c:fa:3d:02:82:e7:f9:ca:
         c3:fb:18:ee:83:8a:1b:d5:d2:e5:ed:eb:9c:9f:d6:85:09:79:
         f7:79:1e:a1:6c:b8:ef:20:f0:52:4d:59:94:bc:b3:eb:d8:1d:
         e8:77:a1:2a:b8:c5:e2:1f:ac:c5:56:0f:c5:72:38:45:4f:b2:
         cf:d8:f0:bb:d3:d5:59:10:0c:10:47:a9:a4:35:15:d1:d5:c2:
         f4:66:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:19 2024 by rpki-client on console-fra.rpki-client.org