Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa
File:                     49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa (raw, json)
Hash identifier:          cAbAy+C+L9XklWzgzL6w79VTq5Ln5sZfCVMkRaSFOug=
Subject key identifier:   97:BF:E5:BC:29:67:03:4F:FB:9A:D5:4F:0C:AB:47:58:58:A4:22:14
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584734C888519C2941C3E398F7F0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     394973
IP address blocks:        209.9.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:88:51:9c:29:41:c3:e3:98:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=8c691b70-7f6a-4e29-93d2-153ea895b7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:44:8d:5b:77:2a:db:81:fd:65:8b:5d:11:
                    53:19:67:7d:a4:7f:74:be:af:a0:f7:14:90:1f:1e:
                    01:bb:15:33:d8:82:55:ed:0c:82:d6:d0:4e:9e:cd:
                    28:95:df:07:e9:9d:1e:28:28:07:df:25:b2:91:d6:
                    32:b2:64:44:9b:dc:96:8f:06:5e:dd:63:cb:9f:cd:
                    d3:c1:9b:d2:90:64:63:9b:6d:49:7f:c6:ea:1f:a2:
                    d1:68:66:a9:6c:6e:20:07:c3:c2:a6:a1:f2:94:19:
                    95:f5:21:8f:7e:19:b7:a2:53:1c:f4:cb:2a:3e:73:
                    46:96:3c:83:0e:05:48:37:8c:ad:19:c3:48:aa:a2:
                    a5:31:fd:17:eb:6b:e3:93:9b:d6:fd:6a:39:94:56:
                    0c:72:82:89:ed:d5:a7:72:81:62:00:54:44:35:9c:
                    31:9a:dd:99:4f:3d:17:27:03:fb:38:27:9c:a1:86:
                    79:4f:6a:fb:e9:94:6d:0c:54:59:4a:52:70:55:b2:
                    b6:9c:2d:a0:e6:88:da:f1:cd:7b:4b:e4:11:23:8f:
                    88:37:02:e9:c3:5f:f7:09:33:5c:64:fa:c7:38:fa:
                    3b:93:e0:ba:a3:7e:1d:15:c7:5e:6d:42:1d:ff:a7:
                    a2:cd:b9:e0:db:04:43:fd:a5:4d:ac:f7:86:ca:25:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BF:E5:BC:29:67:03:4F:FB:9A:D5:4F:0C:AB:47:58:58:A4:22:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:38:77:81:14:8a:26:0f:25:e6:41:8e:42:9d:2c:2b:45:
         4d:3b:fe:85:9a:51:e3:87:f4:c9:5b:12:c3:09:2e:65:2e:37:
         c9:9b:1b:91:48:ec:69:60:97:32:53:fd:1e:88:43:e0:bd:03:
         2e:4b:de:88:29:5b:d0:a9:22:20:33:41:f0:c8:d4:d3:53:8e:
         6a:63:24:09:5e:ef:35:1e:bb:5f:2c:cc:93:c0:30:2c:d5:a3:
         43:0d:68:97:7f:29:21:60:5d:ca:70:7f:a9:85:3b:b8:2a:51:
         09:c2:f8:28:9e:c9:d9:02:af:29:17:94:77:b9:3f:a4:e4:8a:
         fe:a2:3f:72:5d:46:8f:b6:cd:78:d4:06:b1:51:c8:2d:8b:c7:
         89:b7:e0:47:1d:98:f9:3c:7a:b9:03:eb:77:cd:7f:fc:2a:33:
         59:70:dc:14:70:4d:9b:92:1f:75:c5:54:2e:1a:b6:e0:aa:87:
         20:d5:a0:3a:72:29:20:4a:b4:6d:ca:e6:76:84:32:17:31:99:
         5e:bf:26:b4:1d:0d:41:f7:21:75:7e:26:a0:18:48:68:ec:40:
         6c:ce:0f:81:35:db:c1:7a:62:60:35:66:a8:d1:cb:b2:32:84:
         5a:a8:fd:d6:59:e3:46:8f:57:d7:d9:d0:f3:0a:be:b5:63:1c:
         c1:33:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org