Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/06d875c0-c60f-39b9-a9bb-79bcd5ee287b.roa
File:                     06d875c0-c60f-39b9-a9bb-79bcd5ee287b.roa (raw, json)
Hash identifier:          nrpjeUwyQKIIX6aI5UrYllgPFpPPMW144QROo6toVXA=
Subject key identifier:   32:E2:73:A0:D8:EF:79:39:08:59:F6:E7:A6:F6:9C:DF:66:C5:62:08
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F43285846D04533B8F728766C21143580
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/06d875c0-c60f-39b9-a9bb-79bcd5ee287b.roa
Signing time:             Fri 09 Aug 2024 01:00:28 +0000
ROA not before:           Fri 09 Aug 2024 01:00:28 +0000
ROA not after:            Thu 07 Nov 2024 02:00:28 +0000
asID:                     1239
IP address blocks:        141.195.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:45:33:b8:f7:28:76:6c:21:14:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Aug  9 01:00:28 2024 GMT
            Not After : Nov  7 02:00:28 2024 GMT
        Subject: CN=6df4f8cf-b342-4e8d-9643-c558080e8ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:64:1f:d1:56:2c:cb:41:d2:f8:46:40:f6:
                    a3:28:a1:17:16:47:12:5b:dd:91:f5:c9:55:4f:c6:
                    b4:ea:bb:88:2c:b3:1f:34:1a:9c:86:6b:fc:83:77:
                    b7:02:fe:a4:36:e8:99:46:e3:08:e2:67:31:68:58:
                    78:3e:25:04:3f:d2:04:f8:d3:1b:ac:b5:0b:4b:c2:
                    da:6a:26:5e:e8:93:da:87:ff:b7:20:e8:d8:7e:f3:
                    79:ab:86:99:8a:c3:21:19:b3:42:39:f4:4e:ff:81:
                    0f:cf:6b:70:bc:06:36:6e:f6:d1:1a:81:7f:18:73:
                    d2:19:ab:b8:10:48:52:4d:fc:a4:cb:49:f3:b1:80:
                    2a:3d:3d:a3:81:69:09:d9:1e:93:d8:7d:ed:fb:b9:
                    af:f6:ce:2b:16:7b:06:20:fb:8d:0c:ba:d7:5e:37:
                    6b:ae:53:3b:9a:1f:fd:8c:e9:dc:59:07:28:83:ef:
                    b4:55:14:e8:28:ca:a3:be:80:dd:9a:52:ad:80:aa:
                    8f:38:92:fa:81:40:d1:d5:2a:60:50:ae:ae:27:f3:
                    5a:95:49:d5:1f:ed:6f:12:a0:8e:a3:1b:b8:80:9f:
                    30:a6:9d:40:f0:3a:6e:fd:9d:01:6c:c4:d5:d3:73:
                    e4:a2:65:28:c9:6e:8c:73:3b:06:d7:4e:7d:d8:eb:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:73:A0:D8:EF:79:39:08:59:F6:E7:A6:F6:9C:DF:66:C5:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/06d875c0-c60f-39b9-a9bb-79bcd5ee287b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:55:77:d0:5c:6f:ca:04:0e:0c:3e:82:53:79:a9:1a:3c:5f:
         bb:5f:d5:49:c4:7b:5f:9f:bd:e6:92:83:07:82:79:7e:2c:ba:
         49:c4:9c:31:c2:eb:42:8e:6a:ca:25:4c:b4:9c:7d:6b:c1:c8:
         e1:e7:39:0f:95:9b:9d:b4:dc:fa:3c:54:ed:93:55:32:f2:c0:
         47:e1:ac:99:11:2a:33:de:b7:43:11:c9:a3:71:ec:11:78:d2:
         93:20:3f:0c:59:ab:ac:48:6b:67:1b:8d:a5:1e:bd:84:15:33:
         d9:aa:e4:10:24:fc:ee:a5:af:c5:ce:e0:45:6d:f0:9a:4b:e8:
         f4:d8:2c:05:0b:5d:42:1e:e3:8d:5b:80:9b:1e:b3:74:ad:af:
         1a:25:5a:d8:f6:2d:83:38:fa:b8:09:23:e7:5a:aa:63:93:e8:
         a6:e3:2f:ad:c3:ac:5e:45:4f:0e:8f:af:79:0c:02:c1:4f:ff:
         d0:b3:c2:fa:6c:e1:94:9f:ab:cd:f8:8f:7c:15:de:7b:c8:7f:
         f1:54:79:cc:5d:b0:5a:21:45:58:28:cc:69:71:0e:54:c6:bc:
         8f:dc:be:33:5e:ef:24:b2:2c:55:cd:da:af:d6:80:91:15:8e:
         56:9e:05:2a:fc:77:b8:b5:a2:5b:81:d2:4a:fd:96:6f:e4:f5:
         9b:1d:c4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:33:35 2024 by rpki-client on console-fra.rpki-client.org