Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
File:                     25e1f105-51dc-3628-8af3-fd38d010fc75.roa (raw, json)
Hash identifier:          Hiw1X5QC/XRCPO+Bes15VZ2EiSIvFl2zaA/ZcXKS+oc=
Subject key identifier:   26:49:87:D1:FE:26:19:D4:90:9E:55:F7:FB:DE:0D:21:BC:1E:1E:2B
Certificate issuer:       /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial:       010D0C9F43285847DF2F5113585C8B3508F06980
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     399554
IP address blocks:        209.35.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:51:13:58:5c:8b:35:08:f0:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=793c8390-973d-44bd-87d9-1d488f04b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:60:8e:db:70:d6:6e:fb:90:b5:27:53:e6:
                    4a:0c:31:10:b5:35:66:2c:5c:23:88:de:98:3a:4d:
                    4e:ad:01:72:55:4e:4f:48:de:27:97:18:e3:ed:9f:
                    b0:f9:4f:41:22:b2:6b:ae:5f:23:7d:d4:ba:ab:fd:
                    2f:82:2c:99:a7:9a:b9:94:2f:48:a0:da:0b:ac:9c:
                    c0:c8:98:1d:7c:06:7c:20:ab:02:89:6e:69:ac:2f:
                    86:67:1d:64:9b:61:f5:9e:1e:cf:84:48:c2:9b:0d:
                    bb:70:a5:4d:75:e3:28:50:67:17:ed:53:ff:9d:2c:
                    53:a0:b6:68:52:f4:6a:c7:a3:74:72:6f:c0:40:bb:
                    6f:a8:44:5c:aa:52:8a:eb:14:be:c9:b6:c0:be:8c:
                    79:f7:e3:31:35:97:02:c9:9d:51:71:b6:6f:fc:af:
                    74:f7:a5:49:46:28:8b:f3:b3:ed:5f:a3:d0:9e:de:
                    8b:d4:bc:f5:6d:df:97:03:c1:4d:05:7a:f4:43:46:
                    44:da:4e:a0:15:e0:ae:7f:95:2b:b5:87:56:13:07:
                    57:5c:d6:aa:95:85:1e:ea:11:0a:77:31:2b:ba:57:
                    02:6f:fa:be:77:59:e4:d1:aa:5f:49:6b:0a:a4:ae:
                    f2:01:d0:9a:af:6e:85:c7:be:9e:35:7c:50:b2:b0:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:87:D1:FE:26:19:D4:90:9E:55:F7:FB:DE:0D:21:BC:1E:1E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:a2:6b:83:dc:cb:b0:e9:63:30:d7:a1:16:46:b4:c7:ab:
         d5:7f:a8:f5:4e:ac:67:7e:5a:89:64:90:a7:94:c5:6e:b9:12:
         9e:24:db:36:5f:2b:96:9e:c0:ae:f6:55:c0:65:ea:1e:d9:47:
         37:60:6e:f4:c4:53:5f:75:e2:f2:fb:18:7d:df:eb:95:f7:45:
         e5:09:a2:d6:0a:9a:9f:4d:d6:d8:33:c2:51:f9:51:fd:89:c2:
         90:4b:3d:22:96:68:87:7d:7a:fc:e9:fe:9b:5b:ee:90:60:80:
         d7:9c:0d:ef:fc:58:19:87:15:4b:e0:a8:dd:ab:44:03:ea:f1:
         48:de:50:f6:e4:88:4c:28:f9:e9:57:58:91:30:57:f5:81:83:
         c1:ab:26:32:5c:ae:52:79:ac:d7:22:35:3b:8d:c1:5a:2c:c0:
         8f:b1:da:4f:53:d4:8b:0b:5a:ef:95:93:c4:99:76:d4:e9:83:
         12:30:e6:d6:ae:d6:d1:71:57:bb:a8:0f:e6:b7:a5:75:1f:97:
         ac:2f:2b:8d:29:4e:a0:bf:63:13:0e:38:c9:7d:a4:ce:74:54:
         24:cd:4c:ae:62:3d:02:64:d8:73:5b:e4:92:7d:15:5e:bf:df:
         bd:a5:04:97:7d:c8:ea:af:47:c5:f7:42:52:88:d1:51:0c:ca:
         e1:32:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org