Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa
File:                     d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa (raw, json)
Hash identifier:          TqbIrngEOTKnlRidIVKaAS+c6Dm4IkNG0mFVzfUxRXQ=
Subject key identifier:   2F:99:9C:31:D7:16:38:12:91:E9:DA:D2:35:D4:8F:22:4F:67:24:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76BFE92FA97577E0EC9440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     14717
IP address blocks:        208.246.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bf:e9:2f:a9:75:77:e0:ec:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5a3a0926-9925-450d-82ef-b8b3bd2755fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:88:2a:44:b4:1e:7c:05:f1:2b:cb:e5:44:
                    9b:dd:15:2f:5f:82:9b:e3:52:68:e6:af:92:75:95:
                    0c:60:0e:e4:3c:0d:db:ac:c7:96:14:b3:77:14:9a:
                    41:70:bc:3c:22:d3:8c:dc:13:9b:6d:1d:14:6f:d6:
                    06:d5:d0:a0:46:44:45:2b:4b:96:78:e5:f8:50:2c:
                    68:ed:b2:f3:c9:58:5c:cc:5d:64:99:d4:65:5e:db:
                    60:14:d6:f8:67:80:9d:5e:4f:01:90:d3:32:05:80:
                    46:7f:ba:8f:1b:e9:6f:6c:fb:63:04:6f:4d:38:50:
                    64:73:3c:49:ea:da:af:c5:ad:aa:e9:d5:01:9b:ea:
                    80:98:00:b6:f4:08:ee:8b:e1:c9:57:56:fd:de:d3:
                    34:e0:58:34:a5:e0:c0:c8:b3:db:a4:de:53:72:d5:
                    3c:28:bb:ea:de:9d:fd:7a:d4:e2:ce:d5:7e:db:5f:
                    ad:b7:43:68:f1:1b:a2:9d:87:39:d8:1e:8b:cb:a5:
                    36:cb:73:4d:32:76:bf:7f:03:de:a1:3d:19:ba:e7:
                    ef:5f:d9:f5:b8:4a:4f:ca:64:9a:25:ee:ab:e2:22:
                    66:87:15:a8:f7:f0:88:76:91:54:70:cf:68:d0:29:
                    ea:5a:91:bc:75:8a:b3:76:68:bb:ba:76:96:50:b2:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:99:9C:31:D7:16:38:12:91:E9:DA:D2:35:D4:8F:22:4F:67:24:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9ea7529-04e9-3e20-88b1-c1bfb6cc01f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.246.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:c2:bd:fe:d3:9a:e4:bd:19:5d:85:52:0b:56:b5:c8:2e:
         81:5a:df:0e:cb:57:c3:d3:54:cd:d7:ee:74:0a:63:31:0d:d0:
         7c:aa:cf:b1:9b:7b:86:25:d8:58:43:ce:e5:4a:f5:a0:76:ad:
         34:82:71:32:f5:0d:6b:a1:e8:16:30:53:91:78:de:fa:04:75:
         3c:7d:96:2d:38:c2:81:ea:c0:3d:1e:c3:ec:4b:7a:42:d7:51:
         f6:47:90:99:4e:4e:27:81:d7:30:bb:3a:42:ea:45:48:1b:1a:
         e9:f4:9a:23:c4:cd:cf:62:44:6c:d6:c8:87:3b:bb:cc:34:53:
         dd:28:09:4a:57:de:28:c0:44:73:ce:50:7c:72:7d:55:bd:94:
         ec:86:f7:e3:be:6a:99:6c:1f:73:96:86:08:a8:3e:8a:6e:ef:
         f9:5f:41:34:0a:b5:27:9b:49:a5:4b:b6:2f:77:37:ce:15:d4:
         64:59:5e:4c:44:02:ea:37:44:a7:a2:eb:81:76:5c:34:1c:49:
         7b:06:e8:a1:7a:9b:c3:c1:d4:ea:1a:e8:45:e0:e2:47:88:24:
         34:30:32:ca:e7:ad:d8:bc:b4:53:32:a6:5b:23:6a:e0:10:94:
         cf:69:04:62:be:61:63:cc:c2:09:8c:f0:05:bf:fb:1b:1c:32:
         30:4c:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:57 2024 by rpki-client on console-fra.rpki-client.org