Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
File:                     9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json)
Hash identifier:          azgmNWXenapQl/JLnAHqnC5bmlKxh0/U+Ywx82GgbgA=
Subject key identifier:   C1:B5:9C:5E:EE:E3:9E:2E:78:BE:A2:37:CC:2D:22:C9:FC:03:AD:80
Certificate issuer:       /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
Certificate serial:       010D0C9F43285847A0414AEF7E7CE5E6A950EF00
Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     63351
IP address blocks:        207.90.254.0/23 maxlen: 24
                          2606:3180::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4a:ef:7e:7c:e5:e6:a9:50:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=43ed0941-99ed-4bd9-b4ef-77a80023ff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:33:59:d6:c3:8f:df:e5:e5:0c:b0:50:f4:
                    5b:f9:f8:93:58:ec:85:72:93:2c:fb:4b:2e:02:8a:
                    45:58:ce:f7:8d:73:e3:52:02:3e:ea:4b:e7:bd:b7:
                    5d:36:fe:60:6d:ae:8d:36:7d:42:fa:27:93:32:4f:
                    1d:57:fa:f1:ca:0c:0e:22:5c:ce:80:8e:6d:e5:81:
                    b8:b5:50:17:0b:f0:d6:40:3c:fe:a4:33:e0:c1:06:
                    32:c8:cb:5e:4e:73:a0:44:8a:43:c3:d7:5c:1c:7e:
                    9f:33:74:49:f3:63:91:38:71:98:ae:ea:80:ff:3d:
                    85:24:fe:ce:84:7d:10:d7:58:bf:e9:12:07:0c:65:
                    5a:02:19:47:7b:97:da:fc:ef:3c:26:78:bf:5e:59:
                    c7:17:85:90:6d:2a:c9:5b:26:81:e3:e5:30:c2:4b:
                    9e:5f:93:c2:7a:0e:44:4f:57:4e:4d:42:f3:77:a6:
                    88:da:a1:68:18:f4:4e:99:bd:d9:4e:32:00:c9:23:
                    e6:7a:86:6b:92:62:ae:0d:74:d1:5f:01:23:fa:dc:
                    49:0d:5b:9f:f1:52:12:75:76:0d:20:e1:ee:8c:0a:
                    ff:ef:4b:26:a3:b3:2f:4d:aa:7c:e6:70:b4:c6:36:
                    1a:66:ac:3c:47:80:c8:38:f6:52:4d:9b:9b:44:26:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:9C:5E:EE:E3:9E:2E:78:BE:A2:37:CC:2D:22:C9:FC:03:AD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl

            X509v3 Authority Key Identifier:
                keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.254.0/23
                IPv6:
                  2606:3180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:8a:3e:7a:9b:3b:e6:8c:21:e5:5e:ed:69:af:2a:1b:65:
         bb:7a:1a:94:d0:11:ba:d9:6a:07:9a:ee:db:7e:eb:84:37:4d:
         72:2a:a4:6b:66:76:5a:e7:c7:a8:c9:de:74:68:22:2c:24:6b:
         db:b4:73:5b:c2:f0:0c:97:3e:fe:15:8e:3e:b6:87:7f:83:5a:
         58:d9:61:c4:e2:a3:5d:57:d7:04:b0:42:41:2a:7f:34:17:12:
         a3:4b:88:8b:19:32:ff:18:10:ba:16:22:ed:c7:4a:b9:c1:75:
         8e:10:ab:d8:f0:9a:f8:29:5a:4b:c7:d1:30:ea:ee:d2:20:74:
         9c:a1:c9:60:2f:22:a6:25:0f:c3:03:b8:b3:82:da:92:2d:61:
         dc:d5:b3:9c:6d:6d:cc:47:19:ae:23:e0:6e:1a:fb:ca:3c:e1:
         b0:59:0b:7e:2e:67:33:fc:ef:03:d6:e8:98:4b:7b:76:7b:d8:
         7e:1e:e2:01:2a:88:19:9e:d7:49:a2:a8:81:ce:f2:5a:25:e9:
         7f:df:e6:71:75:77:b8:8a:30:4d:20:07:fe:e5:69:d8:f6:21:
         0f:88:b0:65:a2:92:1d:7e:f3:ef:ff:bb:28:3e:02:e7:f9:73:
         19:99:f8:e7:c9:c0:d9:2b:7c:c3:e5:22:5d:c7:1d:de:0f:19:
         4b:22:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:50 2024 by rpki-client on console-fra.rpki-client.org