Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/4efabadd-a70d-369d-9b3c-8ecaff915359.roa
File:                     4efabadd-a70d-369d-9b3c-8ecaff915359.roa (raw, json)
Hash identifier:          zPYp4yl+PHxwX+ql2ext4Tg/C5M3k9R7BlhuBZgSXEg=
Subject key identifier:   8D:03:60:B1:31:7E:AE:81:86:19:EB:DB:59:73:AC:37:BA:D6:37:35
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F43285847AE36BE11D80F5BD7AE9AE4C0
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/4efabadd-a70d-369d-9b3c-8ecaff915359.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     397952
IP address blocks:        158.51.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:be:11:d8:0f:5b:d7:ae:9a:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=207095ea-4437-4a13-9610-9706a5f4bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:9e:fd:2b:35:c8:f5:e8:75:44:6f:39:35:
                    26:c1:b0:fc:11:68:1f:32:bd:44:78:09:87:b6:e5:
                    39:c9:c3:4b:bc:ba:e8:b9:30:cb:2a:cf:09:f2:44:
                    0b:39:1a:f1:12:79:5b:45:91:19:77:f3:cc:38:f9:
                    f1:18:82:29:5c:98:6a:93:db:ab:ca:2c:9f:d4:69:
                    1c:13:52:37:25:5e:c2:38:f8:8e:d2:48:83:f7:db:
                    67:bf:d0:80:1f:01:9e:96:f6:26:86:43:fc:89:79:
                    25:f3:10:25:0e:10:96:8a:42:b0:e8:f6:f5:25:55:
                    73:6c:58:27:db:37:6a:18:a2:62:69:89:6c:98:98:
                    db:7a:62:4d:81:ea:8a:2b:b6:77:08:eb:c3:c6:b9:
                    36:7b:a7:b9:5f:6f:41:77:43:a7:07:5b:cd:59:27:
                    c3:9f:d6:31:d0:9b:33:03:fa:e3:ce:b1:8a:93:7c:
                    8b:95:33:dd:a9:3d:2c:da:d5:99:ff:d4:bc:42:57:
                    69:7f:53:69:e8:e8:bd:7c:32:68:4b:a9:7c:fc:39:
                    80:4e:36:ef:b9:08:9a:ce:9a:05:92:01:b8:4d:1a:
                    b7:ea:d1:63:43:21:2e:84:74:56:f0:7f:ae:2d:37:
                    ce:57:c9:f1:30:e6:d9:23:de:fc:ba:27:2e:d4:73:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:60:B1:31:7E:AE:81:86:19:EB:DB:59:73:AC:37:BA:D6:37:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/4efabadd-a70d-369d-9b3c-8ecaff915359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:2d:db:d4:92:54:f7:16:28:9a:e9:95:d9:ab:10:fa:5c:
         82:09:f3:af:eb:ef:2e:15:69:72:a5:fc:92:b5:01:21:13:dd:
         b9:c9:41:2e:5c:d7:f8:67:5b:64:36:05:24:d8:19:cf:4f:2e:
         02:0b:71:dc:06:be:b3:54:c1:f0:ef:ed:0d:b2:bd:96:8f:e5:
         ba:ac:5a:60:df:79:72:7d:bb:e6:98:72:5a:6b:8a:5a:ed:99:
         e1:d4:22:b0:bd:ae:9a:df:c1:9f:9c:09:a6:1e:f6:aa:ab:2e:
         53:59:3b:54:e3:c5:6c:fc:1b:fc:65:a3:73:3d:44:7e:cb:e3:
         62:a3:96:c6:8e:05:84:09:f3:88:a0:0d:16:13:66:d3:af:42:
         fd:e9:de:c5:77:4f:1d:d0:e7:1b:c5:06:7e:b9:d6:5b:d8:7d:
         0a:7c:d6:24:73:9e:7e:ca:4d:ae:66:e3:59:07:54:43:34:9c:
         c2:d6:db:9f:5e:b1:46:35:be:05:cc:d2:a3:42:50:82:a0:08:
         5f:7d:bf:68:8e:2a:d9:78:09:6d:09:bf:da:ea:9b:ef:72:32:
         de:e7:48:4f:65:af:64:f1:e0:10:48:c8:9e:3e:b7:f8:43:83:
         c4:dd:19:ca:d2:df:ac:bc:3d:c7:73:96:e5:58:08:a3:52:f6:
         58:9e:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:35 2024 by rpki-client on console-fra.rpki-client.org