Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa
File:                     ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa (raw, json)
Hash identifier:          y0OEPJaE751kzdPZMWYqBvVlqd0Xme/843SlWZMOb5A=
Subject key identifier:   3A:40:67:B4:A1:42:96:53:29:8E:B5:10:A8:C3:BA:78:4D:5F:57:C9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C9546A555EE8324570B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa
Signing time:             Tue 24 Sep 2024 16:27:15 +0000
ROA not before:           Tue 24 Sep 2024 16:27:15 +0000
ROA not after:            Mon 23 Dec 2024 17:27:15 +0000
asID:                     397228
IP address blocks:        209.173.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:95:46:a5:55:ee:83:24:57:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:27:15 2024 GMT
            Not After : Dec 23 17:27:15 2024 GMT
        Subject: CN=d9477633-6f53-458d-8832-6abfe1ca38ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c9:15:5f:9b:2c:c5:f1:7e:8e:22:f4:d3:e4:
                    41:bf:df:f2:c8:06:62:15:5d:65:8d:d4:1e:bc:2e:
                    40:03:33:b2:f9:77:e9:e9:d8:62:d3:7d:db:08:9c:
                    ed:44:87:1a:4a:0f:e3:af:30:e1:17:cb:ac:06:3a:
                    99:72:7d:df:f4:63:2d:2a:2f:b2:41:5e:db:e4:c4:
                    ce:e7:5b:77:89:55:b8:17:d5:9d:be:ff:4d:75:03:
                    c6:02:78:9f:df:18:a2:07:98:e8:8e:4c:36:c3:7b:
                    57:53:53:4e:ad:df:ea:d1:3e:68:0f:c0:46:97:c9:
                    25:fa:e5:56:9d:44:35:fa:10:e4:37:1b:ef:2e:c1:
                    b5:39:3e:26:d9:ac:d3:11:f4:a5:1b:35:04:9e:32:
                    49:b1:52:30:40:b7:77:91:36:b5:b2:2f:9f:1f:dc:
                    84:e8:a6:e0:d9:9d:cd:51:6a:bd:d2:6e:9c:da:1d:
                    52:38:15:f2:61:87:08:c9:a1:d0:f5:08:ec:bb:bc:
                    45:15:bc:aa:7a:21:38:ad:eb:f8:9b:41:b0:62:a1:
                    34:f2:bc:c7:aa:c2:87:82:ed:15:7b:b0:c4:3d:b4:
                    e2:e7:2d:61:7f:ec:29:0c:b5:ba:78:a2:69:d2:11:
                    01:0e:48:78:60:09:07:95:86:1d:6a:ad:6e:ad:6e:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:67:B4:A1:42:96:53:29:8E:B5:10:A8:C3:BA:78:4D:5F:57:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:18:c1:f6:46:f0:fd:be:1a:af:54:71:52:43:76:fa:4b:98:
         71:b6:8a:6d:87:3e:dc:c1:bb:be:9c:31:4b:7e:a2:cc:8f:d6:
         b3:ea:99:26:59:60:80:9b:fb:0b:17:da:9d:af:ba:57:c4:68:
         99:79:be:40:a1:ff:75:96:7e:7c:30:50:6f:22:9a:0f:0b:e7:
         d8:9b:35:7d:7a:4c:ec:89:da:14:63:0c:73:25:45:75:9e:dd:
         f2:42:e0:40:6d:33:c8:12:c9:22:ba:b5:41:d3:32:42:3d:b7:
         7f:05:70:63:b8:98:6e:e5:5f:67:14:de:f4:26:ed:18:f1:2c:
         ce:ca:7a:6e:78:a0:e2:21:5b:9d:c5:da:c0:fc:2f:2c:1a:3d:
         90:88:50:39:62:2b:1e:5d:cd:4c:a1:39:c2:2e:15:4b:b6:00:
         51:df:a2:93:9f:86:3f:9c:53:ec:c4:ac:50:ad:76:a3:96:28:
         96:50:1d:e1:f5:d9:cc:07:d8:43:a2:58:7b:ef:65:f7:8a:0c:
         57:0d:d8:0e:80:07:e3:7e:5b:ce:a6:d5:56:1e:55:2f:b0:e3:
         fe:b6:bb:63:fe:2c:d9:51:23:bb:82:56:96:f0:2d:df:0e:1e:
         4a:59:dd:23:f7:39:4c:b3:2a:af:68:c1:54:44:b0:f1:20:f4:
         24:11:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:02 2024 by rpki-client on console-ams.rpki-client.org