Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa
File:                     50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa (raw, json)
Hash identifier:          QlDm/C/ttTD9P8xq+BBlh1zWFvshE+f5YA1U1OLkazE=
Subject key identifier:   A9:A0:8E:6A:E7:7E:40:8B:FA:D1:14:A9:5E:0F:22:A8:45:0D:D1:D1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847362B568DEB6900744E383960
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     30967
IP address blocks:        205.252.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:56:8d:eb:69:00:74:4e:38:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=adf07e3a-3624-4f03-881c-92acb9373e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:99:e7:51:44:af:04:fd:43:a2:cf:2c:94:
                    f6:93:d0:4e:a4:5e:69:3f:a6:97:2d:1f:c0:aa:ec:
                    ad:09:35:0e:ac:27:06:ea:1d:1c:43:36:52:58:9a:
                    bb:64:24:15:4e:c0:4a:f2:ec:93:65:d0:91:c6:fc:
                    ef:20:d4:2c:ea:95:dd:92:63:6a:d8:d2:20:93:89:
                    37:6c:c8:dd:e5:71:33:76:3e:a2:d7:f4:f1:dc:5c:
                    d3:a7:c8:a7:de:e7:5e:75:f3:c3:6d:21:cc:4f:c3:
                    23:81:a6:a5:34:0c:ae:a3:42:1e:3d:c4:e7:18:24:
                    92:ff:70:85:75:ac:1f:4b:9f:3f:17:89:14:04:43:
                    4d:5a:33:5e:f6:ef:99:e5:c9:ce:bb:6d:ac:c4:1c:
                    c0:21:26:6c:74:24:16:cd:fa:d5:b1:f0:67:50:0f:
                    b2:7b:b6:f5:e6:8f:e0:12:66:57:6e:3d:ae:46:0c:
                    d1:93:60:c6:7f:4d:db:34:8c:75:eb:82:82:80:be:
                    02:d5:29:5d:ef:07:38:b7:c2:df:b7:d6:36:0c:59:
                    56:c2:88:51:77:23:1d:5d:cf:76:e2:82:75:04:f0:
                    b5:b2:07:f1:ba:4a:fa:12:e2:f2:06:3a:bb:5e:41:
                    eb:b5:7f:b0:d9:00:33:93:fa:d1:f5:f6:92:0e:a7:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:8E:6A:E7:7E:40:8B:FA:D1:14:A9:5E:0F:22:A8:45:0D:D1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:5f:81:b4:6b:ec:ed:a1:32:02:ba:1e:c3:8b:63:ef:2f:
         55:50:8a:91:43:a0:d4:24:40:99:43:9f:31:cf:b1:dd:c2:23:
         9b:ce:1f:34:dc:f1:4a:95:3f:96:9e:e0:5b:e9:40:23:8f:f1:
         1d:63:75:5d:fc:a6:86:32:27:3f:1d:58:cd:63:ee:f6:19:c1:
         f6:9e:85:2e:eb:74:77:13:ca:89:61:3d:2e:11:36:68:57:74:
         82:4f:77:c6:c2:cc:18:93:84:b1:81:f8:73:04:d7:07:65:13:
         7a:6b:d9:c5:85:37:3e:26:11:44:eb:06:08:33:0e:33:9c:3f:
         3a:18:37:89:ce:03:63:c7:b4:e3:e7:5c:c2:47:9c:cd:60:84:
         4f:81:a1:71:7a:41:74:40:3b:4e:39:57:e6:70:62:a3:88:56:
         96:c0:c0:f8:bc:92:69:b8:9a:e1:ac:85:b5:db:11:98:6f:ca:
         6b:ca:0f:dc:b5:ce:de:e3:90:17:0d:1a:45:27:0f:c5:84:b3:
         39:07:ed:90:ef:5e:ad:a5:78:c7:6d:9d:69:e6:56:4d:62:81:
         0a:65:f7:53:4d:30:e4:04:74:34:a0:6c:ab:67:89:2d:8c:18:
         6a:b7:b0:d7:3a:83:6a:66:5b:04:ce:79:17:eb:9b:a0:be:bd:
         19:a8:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org