Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
File:                     0917c39d-467b-37b1-b692-3a38d4b29e0d.roa (raw, json)
Hash identifier:          gbuzuzlGKrp0ZH7TYO6C2VgrCVzdQAuE9Ce0SIRXn3c=
Subject key identifier:   EC:75:47:AA:F1:EC:AE:DE:D6:B6:16:EC:FE:81:3A:DC:FA:2C:AD:7A
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858478CB687007513081F90200CE0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     16509
IP address blocks:        207.202.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:87:00:75:13:08:1f:90:20:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=dd880e4d-dc6d-4351-8b93-0d68d58f7b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5e:9b:0c:ad:8c:5f:4c:f9:d5:bc:e7:00:78:
                    45:6c:84:87:9e:8c:c0:81:f7:91:27:ef:81:9b:88:
                    97:cd:44:31:04:2b:48:ea:dc:73:81:01:4c:4c:98:
                    ed:00:58:68:6a:4b:67:da:e6:f7:e7:34:0f:e1:ac:
                    47:8a:d0:84:41:6c:a2:55:c8:aa:60:49:e3:e1:f1:
                    53:37:75:05:aa:4b:33:b6:97:a5:42:db:90:f8:04:
                    0a:46:22:95:5f:f8:5a:b2:fc:ca:87:e9:c0:04:c3:
                    35:f8:dd:5d:93:05:54:52:ba:94:a8:bf:91:ca:4a:
                    24:f7:39:43:77:2d:db:3f:2f:c6:26:74:44:41:ab:
                    d9:55:3e:ae:c6:3f:c5:f6:9b:06:42:c1:94:da:2b:
                    7d:49:cf:2a:74:a4:d0:b7:f4:1c:6e:a5:cc:ac:bf:
                    77:db:ef:45:24:0e:b8:ab:ae:23:97:ce:af:05:8f:
                    aa:fd:7c:b6:36:3f:4a:64:03:af:cc:1f:73:ec:17:
                    31:63:76:cb:b5:f9:9e:11:e5:ed:55:ba:99:1a:4f:
                    87:da:9e:a8:be:25:69:62:5b:dd:09:13:cc:e0:01:
                    15:b6:55:9e:b4:cb:84:e2:08:3a:d0:04:14:6e:6c:
                    f8:06:d5:e4:87:0f:5c:ce:16:c7:09:27:c0:96:fd:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:47:AA:F1:EC:AE:DE:D6:B6:16:EC:FE:81:3A:DC:FA:2C:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:67:fa:d1:85:d9:30:4d:06:7b:4e:b9:10:36:5c:78:b0:
         fc:5e:37:8b:8d:1f:02:87:03:33:47:0f:e7:cf:1b:0c:fa:02:
         74:8d:43:2e:0d:9d:dc:fe:14:86:d4:9e:9d:b0:aa:88:96:7a:
         8f:93:8e:da:59:8f:62:6d:19:1b:96:77:b0:ac:20:34:32:5e:
         6c:34:18:5d:cc:91:54:84:1f:be:44:8b:cd:af:46:fa:f3:75:
         49:ca:a2:6b:b5:b7:30:52:bb:5b:a5:ed:c2:c4:67:01:72:57:
         3d:5a:0a:60:43:de:08:ef:a1:d7:8e:ee:90:fd:d8:6a:c9:db:
         3c:68:e1:47:1e:12:b6:34:e4:3d:c6:77:3f:a8:33:02:de:4c:
         21:cb:7c:11:3e:b6:da:83:b6:83:ec:b9:f0:4b:72:ce:15:6b:
         67:c7:2e:be:2f:48:c4:60:09:80:fa:25:62:ff:e0:f2:6e:13:
         36:68:21:0b:d9:59:6a:ea:3f:86:1c:89:03:02:10:62:bd:6a:
         22:87:47:79:7a:2f:3f:1b:39:cf:ec:93:6c:a5:c9:87:46:b3:
         03:5f:81:cb:ac:54:1d:42:ba:19:c8:ac:c1:77:50:df:2d:c3:
         26:00:9d:95:12:29:46:9a:bb:54:47:05:8e:89:8e:0c:56:5c:
         b4:f9:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:00 2024 by rpki-client on console-fra.rpki-client.org