Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa
File:                     d0057656-9498-3ff4-a98a-a3e443f57ded.roa (raw, json)
Hash identifier:          BVi+H71S6ntywJ11ppilY/SQUTqmMKQV/FKxuJIXZeA=
Subject key identifier:   C7:FC:70:7D:0F:B7:EF:BE:82:2E:EF:A6:F8:AE:C9:88:90:08:A5:9D
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F43285847739660B64F089B6DB8237080
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        138.32.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:60:b6:4f:08:9b:6d:b8:23:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=0b36087c-a175-4ac4-8990-1cfcfe56c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:42:ab:e9:33:ee:f2:c8:7a:24:48:67:2d:
                    0a:52:64:51:2a:80:6b:f0:a1:9a:a4:43:9b:f6:07:
                    f8:c5:6f:95:55:4f:79:09:d0:93:ef:04:65:27:d8:
                    c0:df:c1:c2:69:95:2b:15:14:0b:96:c9:7c:45:5f:
                    bb:28:a3:66:a6:bc:72:0b:c4:0d:e2:10:a0:e1:fd:
                    23:2f:48:77:17:72:f4:b5:26:fc:d5:8a:20:4a:62:
                    f3:b0:bf:6b:3c:24:66:a5:da:db:33:fd:64:f3:99:
                    c0:fc:6c:60:75:2f:14:6a:e7:07:a6:08:1e:7b:71:
                    6c:a0:8f:d6:e2:a0:36:6e:f2:30:0b:be:fb:af:a7:
                    38:7d:78:3d:0e:a2:99:0f:c4:59:b6:b6:69:91:7b:
                    a8:60:66:b9:20:d3:be:57:8c:ed:32:dc:a5:46:bc:
                    1c:37:7b:ad:c6:ec:48:88:f8:7d:dc:80:50:d5:2d:
                    93:6b:87:6b:48:1f:fc:8c:b7:63:0c:56:83:5a:0d:
                    85:8f:bf:50:ac:2f:0b:4b:a5:1f:cd:bf:da:1a:24:
                    5a:a5:95:04:62:e7:8b:d5:57:63:3b:e3:97:55:b3:
                    fc:4a:10:c6:49:7c:e2:d1:7d:cb:49:7f:93:cc:50:
                    f5:f0:13:a0:80:5e:e0:5d:3f:8f:c1:40:95:8d:5d:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:70:7D:0F:B7:EF:BE:82:2E:EF:A6:F8:AE:C9:88:90:08:A5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:81:8e:04:38:b6:ba:e3:59:61:b2:75:94:10:0c:20:c2:06:
         f8:61:09:10:be:44:51:87:46:e6:b8:96:8c:45:b2:5d:7d:d2:
         82:aa:59:f6:59:5e:dc:e3:f0:29:21:d1:e3:af:de:07:de:71:
         7f:56:c8:09:4f:9d:94:f4:73:f9:71:2d:db:f8:9a:51:a3:55:
         ee:36:0b:ba:ec:29:cc:ca:84:fc:7f:d6:b4:a7:a1:ad:47:b6:
         a1:7b:09:11:7e:8e:19:9f:68:c2:50:ca:ef:7e:62:64:f0:fb:
         b0:71:b5:9f:7f:9b:ae:c5:c4:bb:8f:6c:7c:78:83:86:b7:9b:
         e2:5d:99:25:68:a6:4a:8a:81:ff:aa:e9:43:82:a3:c7:fa:12:
         65:52:29:0d:2b:13:4e:ec:0a:29:02:db:c3:da:e2:d9:34:5c:
         ba:b3:81:66:95:34:43:bd:83:00:aa:7d:8f:25:66:5b:df:eb:
         8f:cd:a5:85:28:9b:04:c2:07:79:d2:76:5d:eb:a9:68:5a:3a:
         82:6b:d9:46:b2:f9:e6:bd:11:53:b6:27:b8:76:7f:cd:cc:a7:
         4f:2c:eb:89:2a:96:6f:9f:02:cc:34:76:f1:c9:c0:36:3c:a0:
         f0:82:f9:a7:30:83:f4:78:7b:1e:4b:c5:5d:84:c1:3b:92:0c:
         40:3c:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:01 2024 by rpki-client on console-ams.rpki-client.org