Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa
File:                     3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa (raw, json)
Hash identifier:          ji9v84lLrjSAIfGnYkSro5K/sUk1JCmlVnDkiq0dSWQ=
Subject key identifier:   56:AE:39:98:DE:58:C3:FF:AF:63:BD:57:C5:58:25:EB:98:90:3E:EF
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847B696BB4D77D19F371BEA7200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        207.54.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bb:4d:77:d1:9f:37:1b:ea:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=a297f168-f0fb-41f5-ad91-d28ea5826643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:14:40:30:53:0c:d0:e2:1f:6c:a4:a5:cb:
                    8f:bd:24:54:14:54:4a:8b:4c:29:af:43:3e:6f:ab:
                    ee:5b:90:e8:d0:52:18:14:0e:ff:46:9c:37:0d:04:
                    c6:e3:5c:5d:cf:38:a5:5f:b8:dd:ad:14:07:e9:8e:
                    25:d5:94:71:51:ca:5a:45:f1:ad:29:ca:e3:f6:91:
                    12:57:cc:0f:db:40:04:89:fb:ee:ae:de:df:03:40:
                    a9:69:38:ea:e5:11:27:68:71:34:b7:20:d4:dd:13:
                    95:10:f6:07:f1:b4:85:26:d9:e2:56:48:5b:47:76:
                    86:63:68:4f:31:07:e2:f5:7a:f9:04:56:f1:65:05:
                    ad:e2:27:5a:2d:33:7a:7d:f8:e3:ff:5b:52:60:37:
                    d3:3c:cd:f5:90:e9:c6:9c:cd:f5:ab:d6:75:68:9e:
                    a5:e3:39:03:db:2d:95:23:2b:ef:df:6b:a1:63:53:
                    3d:b0:78:56:71:6e:5c:f7:cd:c1:8b:c4:60:53:c8:
                    30:bd:87:1d:56:0a:dc:dc:fa:74:2c:40:2a:56:dc:
                    1e:8a:1b:7e:b9:b9:00:48:6a:54:38:31:eb:ec:be:
                    5b:bb:93:90:af:06:35:da:6c:4b:31:f9:01:9e:d9:
                    e8:58:2e:8e:60:8c:46:19:34:2a:b1:df:71:af:88:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:39:98:DE:58:C3:FF:AF:63:BD:57:C5:58:25:EB:98:90:3E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3f7eaf42-b3d4-3a77-b56b-ea85748ee484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:30:db:eb:be:fa:c3:cc:e8:f0:5b:ce:11:49:c3:50:28:
         26:6a:1d:b2:e5:a0:d0:73:8b:ff:f5:c9:f7:1c:77:99:fc:be:
         16:0e:93:d8:74:17:97:be:8e:f7:b8:55:a1:50:ba:1f:ed:94:
         30:0e:f6:03:36:ba:04:ec:ed:e1:59:20:b5:7f:e6:76:fa:b9:
         0f:8e:76:20:58:14:d3:8e:bb:8d:35:82:80:6c:81:1c:4f:4b:
         91:ea:02:bc:58:9b:92:92:cb:45:7a:f2:d0:3f:19:79:50:2e:
         83:81:d8:6a:f0:7a:1e:b2:db:cc:28:ce:94:63:c3:72:ba:2e:
         16:41:3b:c5:2f:fd:58:53:e5:e8:49:33:f9:cf:8f:a3:56:82:
         25:4d:42:a2:4c:6c:90:26:ee:8a:c1:85:78:4a:a1:ac:44:bf:
         6c:1b:d7:38:7d:a0:45:fe:c4:a9:03:e8:c1:33:69:b7:16:b1:
         10:e0:83:88:9b:91:8d:c2:c0:5d:a9:a7:53:2b:9c:d1:82:d5:
         a5:95:20:5e:56:40:b1:14:a5:b7:53:10:66:45:33:9c:da:6a:
         e9:b1:99:b3:47:ab:45:d5:1d:8e:4e:46:18:c2:db:9b:57:bf:
         ae:23:b5:1d:42:28:90:50:b8:d3:8e:c9:66:d8:90:73:3d:b5:
         b7:88:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org