Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
File:                     52fe4d79-5533-3ee4-b36c-9164abc80931.roa (raw, json)
Hash identifier:          w2q4wteOFRVuYGG93n/c9mpk1locWZG0RXKePdU5i/Y=
Subject key identifier:   A6:39:D5:25:69:AA:7E:D4:5A:B7:3E:BB:26:5C:01:3E:6E:36:11:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584793B12585F40A0AC21DCFFC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     8987
IP address blocks:        208.204.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:25:85:f4:0a:0a:c2:1d:cf:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=978046a4-8c40-44c7-94f0-6430cf0441fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:c4:14:07:b7:c5:b4:d5:93:1c:71:e3:15:
                    56:27:3e:bb:6b:cc:e9:ac:b7:17:bc:8d:d8:a8:0d:
                    a8:8c:65:7b:b5:bf:68:4e:11:37:47:ca:f3:39:63:
                    2b:78:6f:37:f5:ca:ec:e5:dd:84:5b:13:bb:c2:93:
                    6d:85:4d:3f:e1:6f:af:45:6f:d8:df:b3:1a:35:e1:
                    8b:47:8e:68:3a:6e:07:7c:3b:13:c2:6a:53:47:30:
                    92:28:19:7a:22:2f:b1:c7:2e:25:86:1d:76:5e:9a:
                    d1:cd:93:66:c6:ea:4a:d8:3e:ee:69:fa:f2:26:3f:
                    b7:3d:f3:ed:4a:3c:49:6b:bb:a0:6f:e6:7b:76:82:
                    67:fb:3f:5f:1d:a5:1b:0f:a7:7e:cc:de:12:e5:36:
                    87:86:89:b0:dd:20:74:ab:96:85:64:90:30:07:91:
                    03:b9:0d:47:2d:e1:8b:4c:03:ad:d1:40:62:10:cf:
                    13:e1:3c:b1:75:52:65:76:a3:39:a8:f4:27:55:e7:
                    04:3e:34:5b:c1:5d:5e:c5:2e:81:3a:74:a1:38:ee:
                    0d:1a:f9:8e:d4:48:62:ea:52:fe:01:d2:9a:ca:01:
                    a8:1d:8d:c8:5e:f3:e0:3e:0a:99:dc:b6:c1:11:66:
                    d8:5e:e8:33:59:7d:44:4c:b7:94:62:fd:3f:8b:bf:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:D5:25:69:AA:7E:D4:5A:B7:3E:BB:26:5C:01:3E:6E:36:11:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.204.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:64:cb:b5:52:29:39:a4:88:94:ee:37:12:bd:a1:a6:36:66:
         ab:fc:1e:f8:9b:2a:4b:b3:0c:89:7c:2f:1d:7c:8e:d4:b6:be:
         ff:dc:76:d1:e7:18:bc:de:ef:8a:17:07:50:ed:38:6d:4a:21:
         60:81:2d:e6:42:fb:2b:14:97:85:b5:b3:d8:fa:71:91:ea:16:
         eb:e7:93:b9:57:97:f6:db:d8:f6:72:ae:90:ca:40:05:7f:f7:
         59:24:a3:16:99:5e:61:8d:65:8c:58:0e:da:5e:de:ac:87:d1:
         91:1a:f4:73:47:dd:85:39:97:f9:95:50:df:cb:e6:72:49:06:
         58:3e:c7:ea:ac:d6:8e:da:d4:f3:6a:07:f3:4a:ba:31:03:0f:
         a4:5f:7b:14:9a:93:82:0a:83:de:73:a7:5b:23:2b:7a:ad:03:
         90:da:75:01:2b:66:d5:3c:cc:b3:88:5b:12:54:51:c0:14:d7:
         c8:7f:6a:cc:48:a8:f1:3e:90:dd:85:17:e9:cd:58:99:ad:80:
         fa:68:ad:04:15:bc:40:32:44:06:57:e5:02:5a:3d:09:5b:86:
         e4:18:dd:5c:88:6c:28:fa:92:fa:fc:62:9e:26:92:34:ea:06:
         6b:bb:f1:be:79:a6:54:72:3f:b6:bf:be:a2:0a:3a:87:4c:43:
         b4:bf:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:30 2024 by rpki-client on console-fra.rpki-client.org