Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/832365d3-1531-3d68-80a6-2f9497328fa0.roa
File:                     832365d3-1531-3d68-80a6-2f9497328fa0.roa (raw, json)
Hash identifier:          IbsaeEHzcp2Y1R8Toc7LhIEYzPoIW92MxwKHxEOBYcA=
Subject key identifier:   A9:1F:A0:54:C2:A2:0C:5B:D0:E7:28:6F:6F:9F:8A:79:8F:18:45:12
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584749B605D65BA4199335B8B800
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/832365d3-1531-3d68-80a6-2f9497328fa0.roa
Signing time:             Sat 21 Sep 2024 13:00:41 +0000
ROA not before:           Sat 21 Sep 2024 13:00:41 +0000
ROA not after:            Fri 20 Dec 2024 14:00:41 +0000
asID:                     21743
IP address blocks:        141.195.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:49:b6:05:d6:5b:a4:19:93:35:b8:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Sep 21 13:00:41 2024 GMT
            Not After : Dec 20 14:00:41 2024 GMT
        Subject: CN=a2fa4552-612b-4409-926d-fdd84c5ea668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:85:2d:71:77:91:5f:c1:e0:6a:53:9c:3f:
                    81:5b:2a:00:9f:88:f7:e5:22:07:e9:d0:26:ec:26:
                    79:e9:df:af:a4:c7:40:2f:d9:eb:02:a2:cb:fc:96:
                    1f:7f:e2:35:ad:dc:52:0f:6e:db:8d:e4:ee:6f:50:
                    90:f4:6c:59:35:cf:96:ef:b9:96:f1:be:7c:25:8e:
                    24:58:8c:12:73:31:73:54:4f:a1:98:db:fa:70:e4:
                    f9:4e:6b:6c:5a:fe:8d:7c:bd:92:52:08:94:17:ec:
                    da:f0:fd:f3:5b:a5:1f:5f:7f:d0:de:18:bb:a0:ee:
                    c7:20:f0:79:e0:be:1b:a0:b7:b4:ab:e6:a0:b9:cf:
                    bf:fa:01:6b:c1:5e:e7:ba:01:be:8c:89:c7:08:bf:
                    65:41:0b:2d:4f:51:8a:85:d6:bf:b7:45:bc:2a:05:
                    0c:ef:f1:49:12:0a:7b:43:83:1e:0c:6d:47:06:10:
                    1b:5d:c1:0e:16:ba:ec:07:0a:ca:9f:3d:81:a4:de:
                    bf:99:e9:c3:5c:3d:73:81:d2:7c:f5:8f:e1:9c:8a:
                    85:1f:ac:cf:86:a7:26:ad:eb:9a:db:7f:67:c3:32:
                    c5:e8:12:83:35:1c:27:85:96:ef:29:3a:89:5e:72:
                    5d:23:5a:3e:2a:b3:de:1a:7a:a3:0f:de:31:36:dc:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:A0:54:C2:A2:0C:5B:D0:E7:28:6F:6F:9F:8A:79:8F:18:45:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/832365d3-1531-3d68-80a6-2f9497328fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:10:01:f8:1e:fa:de:0f:fb:20:6f:6f:eb:ee:6e:66:d1:
         b3:23:c3:cc:85:6e:a1:01:2f:cd:1a:ba:28:04:56:28:b6:3b:
         37:0b:02:59:67:4c:63:d4:2a:1c:f9:a8:14:f6:bb:50:d1:4d:
         30:0c:47:2b:ce:21:2d:24:5a:32:0e:d3:74:10:2f:44:01:38:
         df:eb:a9:b5:8c:ad:ce:9e:25:d6:72:bf:5b:a5:77:31:9e:bd:
         b6:a0:1d:09:70:ef:1c:b5:ed:8a:d4:6b:fc:ca:77:bf:7b:2d:
         e0:4c:e2:c9:9e:76:46:cb:ac:b0:53:5e:f4:25:b2:72:9c:75:
         03:27:5b:65:68:78:f0:c5:5f:f3:6b:a2:1e:af:03:33:f5:60:
         f8:3a:bb:5a:a7:a8:1c:d7:8e:5c:c6:56:52:99:66:5f:0b:e2:
         3c:13:32:b8:73:ec:08:4c:94:4a:64:70:6f:e3:b0:e9:13:4f:
         01:d7:39:63:52:f6:3c:7e:6d:05:16:a1:86:c0:5d:9e:cb:87:
         ae:bb:2e:c0:25:34:21:20:07:9d:bb:59:9d:4f:61:3d:49:97:
         4b:d6:df:29:26:a3:d2:7f:b9:bb:b0:66:ec:44:93:20:1c:81:
         aa:11:bf:2a:59:fd:85:75:ae:9d:d9:07:43:27:d8:1b:31:86:
         ee:ad:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org