Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
File:                     e0830e7f-f232-3d91-9109-0a32c4167c72.roa (raw, json)
Hash identifier:          zf8kBxw6aSoWFjm6ozJQYuyR3LyQ5M0tcSSg5pUiabc=
Subject key identifier:   F6:BE:FB:EA:A4:47:A5:B0:95:F5:D9:B7:3D:31:DF:1B:83:9F:2A:E6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858472C65DE5C8EAF79E31FECF300
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     3491
IP address blocks:        205.252.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:de:5c:8e:af:79:e3:1f:ec:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=5023a887-19e8-4531-89c9-2e0fe7f789b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:d3:f8:d6:72:91:4a:6f:7d:c8:99:c8:d8:
                    81:c7:98:35:85:64:a5:72:65:d1:c6:19:d4:23:de:
                    77:7f:ac:96:5a:49:4f:07:c9:1e:1f:b0:16:98:9a:
                    f6:68:ad:54:93:52:da:d8:ac:53:53:49:e9:79:23:
                    e2:5b:ec:d6:8c:cb:8d:ac:3a:16:7a:86:8e:55:2b:
                    52:31:ca:04:22:56:2e:42:3a:7b:35:92:dc:fa:a9:
                    36:1b:16:15:f2:16:c3:ad:66:f9:b6:6d:7b:5e:5a:
                    49:c3:77:0f:19:1a:03:41:ff:5c:45:be:2f:05:03:
                    33:00:06:1c:7d:73:d3:71:a8:bd:65:ae:7f:67:1e:
                    03:24:f9:cc:7c:58:aa:58:03:13:f7:9d:db:12:04:
                    f2:90:f2:64:b9:0c:13:5b:e3:b4:c6:c3:0e:cc:43:
                    40:53:56:8b:9c:6f:38:61:31:01:5c:03:b5:0f:54:
                    8e:b7:b0:a0:17:f7:01:af:0b:e2:f2:cf:27:8e:b3:
                    a3:20:d3:86:6c:59:eb:96:de:a7:8d:90:d6:08:4d:
                    a0:6c:65:17:5a:fa:09:60:8c:60:8d:dd:22:fe:50:
                    2e:a2:56:c5:16:28:be:60:29:7b:42:8e:ad:4b:98:
                    99:22:42:fb:a4:99:9e:2e:3d:89:e4:94:cb:e5:ca:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:FB:EA:A4:47:A5:B0:95:F5:D9:B7:3D:31:DF:1B:83:9F:2A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:73:ad:bc:13:25:55:98:93:1f:b7:9c:f6:d2:5f:1e:1b:8b:
         fd:d3:ca:dc:af:74:81:5f:75:6d:94:f7:3a:b1:c4:a4:af:fd:
         2c:f4:45:7e:7d:c4:86:7c:fc:3b:f2:a7:06:e2:74:cc:53:a6:
         6c:4b:02:ae:72:32:e2:0c:8a:56:f7:b9:54:51:41:d2:19:05:
         9f:d9:33:7b:17:0a:97:ec:d2:b8:b1:c6:87:65:2b:fe:0e:cb:
         0c:80:a6:bc:9c:dc:f1:a3:1b:00:59:f7:3e:5d:93:00:e4:97:
         12:d7:20:8c:e2:0e:c6:26:92:fc:c0:38:be:bf:c5:8b:3e:39:
         a8:ff:59:01:4d:0b:0b:4e:d0:d3:b0:29:40:85:10:8b:4f:7b:
         79:81:2d:d7:51:49:77:2c:b9:39:d4:4f:5a:0d:bb:33:0d:6f:
         37:6a:1d:0e:5b:32:86:89:c6:4c:8f:18:41:2a:e1:c8:f3:7a:
         1a:42:c7:b6:f2:0b:4b:51:bd:5c:14:bb:a5:e7:af:da:50:e3:
         7e:4f:2e:68:72:ff:bb:83:bc:ee:f0:70:11:38:07:53:80:c3:
         f4:cd:ce:12:a0:16:48:17:4b:aa:00:34:19:ba:12:b9:89:40:
         cf:bb:75:d5:58:c3:79:d2:71:69:0e:24:33:86:70:b6:69:43:
         87:f2:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org