Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa
File:                     11201fd6-3297-3fa0-9993-7151b5002998.roa (raw, json)
Hash identifier:          k4Au0Ttw4LIt0tcEicGs26p2jc+fx4iwtR8ujkIKvK0=
Subject key identifier:   C7:1E:EA:37:4E:F5:E0:B2:0C:42:E8:7E:6B:91:75:14:E9:FA:69:2F
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285847BD915B523B39691A570538C0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     3738
IP address blocks:        192.250.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5b:52:3b:39:69:1a:57:05:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=06e7d429-de87-4f25-b4e8-cf3a5760b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:82:d7:66:8c:64:5e:db:5c:43:d0:85:c1:
                    9a:16:29:36:6b:93:fc:bf:d7:ef:32:c3:f0:1c:df:
                    ff:24:44:41:35:08:6e:dc:4c:42:fe:0f:f5:8d:62:
                    da:a3:73:f6:4e:60:9a:5b:6d:34:de:9b:1f:da:be:
                    75:f5:a0:f5:b7:88:48:15:a4:2d:81:81:7b:1a:c0:
                    51:20:fe:84:f9:16:ef:05:85:45:a0:98:d4:1f:76:
                    c1:9b:d3:ef:7d:7a:5f:ab:51:00:f2:6b:1e:aa:97:
                    9f:d1:d8:65:e7:bc:7c:24:98:c9:0e:cb:46:70:86:
                    b3:73:55:34:58:ce:d5:ef:a9:42:6c:04:00:28:82:
                    40:55:37:e7:d8:84:6a:01:ba:a0:91:bf:28:97:e8:
                    0b:cb:15:d5:e9:88:ee:1e:e9:6b:8b:30:ce:94:89:
                    07:31:68:ae:e6:18:e5:83:94:45:24:e0:88:b2:e0:
                    8c:57:5e:cf:a2:fd:47:7f:20:d5:e1:07:73:b9:37:
                    94:5e:85:59:1d:53:33:b2:c1:10:17:41:56:df:18:
                    52:40:1d:bc:6e:b4:43:5a:1f:c0:21:a3:54:34:8c:
                    16:92:d9:8e:49:be:40:a5:e1:d4:f6:60:30:02:55:
                    77:c8:e1:38:bb:d1:0d:6f:70:60:75:a2:79:e9:ac:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:EA:37:4E:F5:E0:B2:0C:42:E8:7E:6B:91:75:14:E9:FA:69:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:23:f8:e5:df:6a:89:1f:aa:f6:2c:16:a7:ce:e1:74:e5:
         e9:28:03:d0:8d:b0:54:f5:a4:96:bb:ef:98:0c:6c:28:bd:3c:
         7d:6c:c0:56:0c:fb:af:2f:e3:92:98:c8:0f:a9:53:1c:3d:e0:
         65:04:f1:89:6a:ee:93:ed:6b:7b:e6:f8:79:5e:83:85:94:bf:
         ff:74:44:6b:f2:95:cb:63:7a:8e:d6:62:48:66:c9:91:79:ab:
         9d:9e:99:3b:e1:ef:bd:6b:cd:25:15:ed:08:2c:98:73:9f:2a:
         75:fd:3e:e7:97:af:c3:4b:64:5e:fc:db:27:44:cc:b9:9d:cc:
         21:fe:7d:b4:87:00:c6:3a:e5:d4:d2:c1:55:2f:6b:7f:bb:44:
         41:74:8a:3d:e8:a5:f2:51:df:60:4e:91:16:99:18:fd:3a:5c:
         79:59:ef:b3:14:d0:2d:89:3c:04:b9:f4:b1:fe:c2:5f:0f:36:
         54:38:92:78:d9:e9:fc:df:e4:4d:95:de:72:08:3d:f2:32:24:
         36:b2:23:06:72:4d:c8:f2:99:8a:e6:69:32:35:b8:5b:eb:8f:
         6a:af:d0:24:41:95:5b:3f:a0:ee:e2:9a:3a:6e:a4:d7:9f:3d:
         44:97:ff:e6:52:36:51:e6:db:d0:f0:ea:98:e9:ea:25:3f:04:
         32:ed:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org