Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
File:                     7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json)
Hash identifier:          pktl6l2IXEuPVyksKVjag2wz7a50PXBzzLLOOvoNqe8=
Subject key identifier:   BD:3D:EB:21:E9:B9:85:59:8E:BC:D5:68:09:EB:35:AF:B6:A0:99:89
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858471BA5A892535DC3285A9FA940
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        207.202.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:a8:92:53:5d:c3:28:5a:9f:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=2a3e0eb4-7245-473e-b650-1b2f3eea25a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:ff:71:ca:d3:80:57:da:2d:51:bb:67:c0:
                    51:9a:ce:7b:4a:84:80:9b:eb:dd:aa:6a:6c:78:4e:
                    b0:d8:28:b8:b4:3d:be:df:1c:e4:ab:fa:a2:af:42:
                    36:c7:3d:30:3b:36:34:a2:6f:7d:38:aa:8a:84:0b:
                    f3:20:ba:0d:de:2b:7c:a8:63:82:77:8d:5e:c1:56:
                    a1:e2:a6:7d:af:ae:7b:1b:14:c9:e1:05:16:12:f1:
                    aa:f7:45:78:64:c5:68:d9:9e:0a:61:f7:34:cc:c6:
                    5d:c0:ef:35:36:8e:36:15:fa:da:39:2a:53:b9:36:
                    8f:aa:72:d4:b0:c8:95:9b:99:1b:b8:da:67:e9:be:
                    57:4a:16:ba:16:09:f5:65:d1:d5:a8:49:f1:55:45:
                    ed:d9:ce:43:ad:4d:8d:02:a6:64:99:d7:b8:5a:37:
                    0b:30:71:fe:15:40:36:86:34:86:ec:f6:86:c2:ad:
                    af:be:dc:cd:e4:d3:06:15:14:c4:4c:ee:47:7e:ea:
                    bf:39:28:f0:6f:59:f6:a9:59:0a:1f:85:9a:79:0f:
                    35:f9:f9:da:f6:d5:2e:70:ec:62:c0:94:d1:e6:5e:
                    47:e1:c7:d3:61:48:7f:43:b3:82:46:66:c3:0b:92:
                    9f:5e:24:6d:9e:9f:9b:18:35:a6:a5:68:56:1f:00:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3D:EB:21:E9:B9:85:59:8E:BC:D5:68:09:EB:35:AF:B6:A0:99:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:62:b3:ce:83:14:68:6f:64:28:cf:b2:32:07:2e:9e:e4:
         d4:ce:d9:60:bf:00:d4:cd:12:fb:8d:f8:27:b9:52:20:54:67:
         cc:fe:af:36:1c:7b:36:4c:29:9f:5d:8c:bb:c0:a5:49:b2:76:
         6a:0a:9d:03:9d:30:4f:40:ae:7f:e0:6c:c4:3c:22:7d:ca:b7:
         b5:27:31:6e:95:d1:64:66:58:73:0e:0c:72:15:d7:b4:29:03:
         06:69:e1:b3:c7:a1:4e:97:9b:be:10:b4:25:a5:68:1d:9a:8f:
         1b:11:3a:5d:e6:35:52:04:7f:59:e7:68:a8:c9:20:87:2a:86:
         21:44:8b:28:7f:2b:2a:3b:65:6e:80:14:2c:d8:00:1c:12:bb:
         5f:83:82:8d:04:87:56:f0:f9:10:fd:f5:75:9e:d1:c0:50:2c:
         a1:12:6b:da:f8:eb:10:91:35:2e:99:82:4e:18:07:c0:97:3f:
         54:6d:8f:05:de:d7:fb:82:69:3d:a3:7a:55:af:c8:f7:f5:ff:
         fc:2b:0e:aa:85:81:59:ea:c2:c6:5d:0c:5d:57:86:6c:97:37:
         6e:1e:af:55:f9:5f:a7:01:2e:f7:73:d4:db:30:e6:a3:b0:0d:
         b1:3f:70:db:f3:e2:1f:b1:2c:da:f7:b2:9b:a4:84:7b:95:a0:
         0f:3a:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:00 2024 by rpki-client on console-fra.rpki-client.org