Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa
File:                     c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json)
Hash identifier:          VyCUuY/RRiW0LO9VRk1bjl/iViLc9q7M5e2/qU1hyE8=
Subject key identifier:   F2:59:E7:61:2B:84:E2:3F:D2:C2:96:B0:57:3C:25:09:CD:9D:AE:F1
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285847CE6F3C78F7719BDAC13D9900
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     16409
IP address blocks:        207.114.24.0/24 maxlen: 24
                          207.114.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3c:78:f7:71:9b:da:c1:3d:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=2a3cbe4a-9ecb-43f6-aa39-fc192efa62dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:81:6e:a2:45:21:f2:10:aa:25:3a:6b:39:
                    1d:e0:97:c8:df:bb:83:5d:30:6e:54:5a:3e:0f:fe:
                    82:ed:96:0b:d3:4f:56:7d:b3:c3:46:38:e9:f0:c4:
                    0b:3e:45:f8:0e:06:80:93:fa:af:26:32:d5:f4:85:
                    16:1a:19:ca:9c:71:03:27:7d:7f:8f:f5:b5:9e:63:
                    c6:6d:ee:da:fd:59:b4:96:96:b4:cf:cb:56:00:9b:
                    ba:e3:e4:79:1a:98:ac:29:f0:2c:1f:bb:1e:a2:e0:
                    c0:37:00:76:06:ff:62:87:65:97:dc:c3:9d:99:cc:
                    48:36:54:2f:d5:cb:65:86:b8:1f:9a:5d:47:c3:94:
                    c4:d5:90:96:1b:ca:00:3a:1e:2c:c3:73:51:b0:c9:
                    41:8d:bc:5f:1c:ca:71:1b:ac:41:4e:f0:c8:ed:4c:
                    c8:97:fb:a5:31:e3:dd:03:3b:de:09:ab:80:35:1d:
                    ac:b6:93:43:03:79:b5:8a:05:a9:ce:81:9c:24:cc:
                    80:61:ec:8b:24:37:02:2a:b5:0a:09:98:9e:69:90:
                    48:5f:d7:e6:82:c3:ba:86:71:7c:d6:7d:96:b3:79:
                    b3:c4:59:7d:51:7d:43:d7:77:10:79:49:00:0f:6c:
                    0d:09:c8:9d:21:d4:16:9b:ba:06:bf:fe:c4:7e:af:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:E7:61:2B:84:E2:3F:D2:C2:96:B0:57:3C:25:09:CD:9D:AE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.114.24.0/24
                  207.114.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:49:dc:29:ee:d7:9b:8f:71:f3:12:81:01:30:f0:6b:0f:54:
         00:eb:ee:55:80:d4:ce:57:46:7c:7d:a2:d3:d1:3a:cb:f2:58:
         fa:a5:b4:da:e6:ee:e1:fe:c0:f2:98:79:9c:a9:2f:2c:c8:7c:
         1c:6f:cd:00:58:03:06:db:ed:95:8f:fc:d8:fa:7a:3a:fd:17:
         19:45:5a:6c:09:ba:58:8b:5c:d5:74:fc:65:65:b3:fa:1f:d1:
         fd:48:b2:b4:e4:f3:93:21:8a:82:83:8b:1c:a9:94:9d:82:74:
         0e:4b:fc:d2:d9:f0:1f:a1:d4:1d:39:9f:b7:ad:9f:79:2a:67:
         57:9a:d9:f5:6f:e7:d2:6e:d5:82:ef:e9:9c:93:72:e5:bb:42:
         4e:65:8a:9f:1c:4a:4e:33:f4:de:d6:d1:79:bf:53:c9:93:cf:
         77:99:2b:fd:6e:fa:13:5a:d2:43:0b:a9:ec:fc:69:2a:81:41:
         87:76:0f:d2:b4:bb:6b:1f:28:48:6a:9a:cd:6b:5e:3f:c6:45:
         3b:8d:a4:c2:00:52:eb:fd:71:5e:cc:b0:e8:d4:39:a2:50:b7:
         02:bc:a7:7c:61:dd:13:0e:eb:fd:3e:f7:57:b5:03:57:9b:4c:
         77:03:fc:f5:9d:79:1e:41:15:a3:53:e8:23:0d:2d:d3:68:da:
         dc:3b:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:49 2024 by rpki-client on console-fra.rpki-client.org