Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa
File:                     6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa (raw, json)
Hash identifier:          V4QXuamCe2KsOlkmJHcO4WKVRtxrSv0VMUSt33mcREY=
Subject key identifier:   E8:6F:2E:50:5F:87:A9:53:D9:D8:98:4B:8A:ED:9A:B6:8A:B4:5B:26
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858476C9DB8F2FCD0A763497D07C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     30238
IP address blocks:        207.54.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b8:f2:fc:d0:a7:63:49:7d:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=18132cc1-3093-4173-b542-0916f2bfa332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:33:d2:f4:42:f2:39:c5:77:ea:a4:a6:50:
                    b1:93:76:b0:7a:03:b2:07:7f:8e:df:8b:49:eb:5e:
                    eb:94:c1:03:7d:b6:dd:4a:4d:4f:7d:60:c4:6a:21:
                    95:8b:4e:50:fc:cb:ee:21:39:b4:d7:6a:7d:eb:78:
                    a7:ef:97:28:24:0f:b5:cb:15:c3:48:6f:f9:ba:51:
                    70:55:4d:ad:d2:ad:c0:01:4d:ab:d0:fa:1b:3c:22:
                    9f:00:94:99:3c:d5:b5:24:95:48:68:72:6d:e2:96:
                    70:b0:a0:34:10:5c:98:e1:2a:03:9a:e3:01:47:e3:
                    68:7c:01:94:80:ea:e6:ef:22:08:2c:a9:a3:5e:51:
                    cd:64:78:76:4c:c8:1c:b3:b8:c7:7b:cc:f7:19:8d:
                    d2:3f:19:51:bb:3c:71:57:c9:1e:51:ab:1c:25:d2:
                    4c:02:1d:a2:01:ed:be:e4:73:67:0d:f8:03:c3:c0:
                    8c:04:02:49:67:ad:82:2a:01:d6:a0:f6:8e:8b:46:
                    1a:59:17:55:a5:4e:08:f0:c2:ad:c3:0a:ff:44:a0:
                    db:fa:a1:9a:8b:e5:86:41:84:da:65:64:46:2c:03:
                    ce:3b:ba:d3:49:17:15:8b:3e:86:73:d4:d7:f2:76:
                    56:25:2c:05:5c:09:04:0a:fa:c4:66:d4:3e:ed:07:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:2E:50:5F:87:A9:53:D9:D8:98:4B:8A:ED:9A:B6:8A:B4:5B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:78:d0:9f:40:ec:76:42:2f:08:1c:0d:f7:9a:fe:62:ad:c1:
         a1:fa:8a:0d:5a:c8:22:20:be:da:b4:d8:f7:66:0c:0f:3c:77:
         46:0f:b1:80:2f:97:07:d8:4f:42:e5:81:df:b5:c8:43:6b:c7:
         80:2f:cc:8d:f1:7b:9e:26:0f:d2:55:aa:45:ef:8f:db:b4:a8:
         ff:04:e3:d5:57:09:99:2a:ae:f8:57:1a:78:b1:63:43:8c:65:
         d2:fc:a8:58:29:42:7a:c7:16:cc:81:a1:46:a8:22:10:ec:3b:
         34:30:2a:1d:3a:f1:b5:54:e0:a2:36:27:90:86:13:56:a2:36:
         61:43:97:40:82:b0:ad:6b:7f:43:5a:d8:61:61:af:4a:07:86:
         11:2a:b4:36:e6:48:55:71:9d:22:75:6f:8a:e4:dd:67:8f:54:
         16:8d:d1:7b:50:2d:b2:2d:9f:99:14:ab:a9:33:6a:b9:25:a0:
         0b:be:19:1f:33:0e:4a:6f:9e:ec:ae:3a:c8:b8:29:8c:0e:5d:
         0e:1a:46:94:ab:38:a7:c1:a6:15:28:6f:09:d6:f4:e0:d5:d0:
         ac:cc:1f:a2:ec:7d:bb:24:4d:a7:c0:43:0e:fc:37:63:2d:f1:
         02:db:5d:16:df:c3:2c:cc:38:48:5a:29:3a:52:dc:19:33:fa:
         35:b3:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org