Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa
File:                     7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa (raw, json)
Hash identifier:          7ZK2+MRO0VOtFUjiBZhX1jchT9yeq6sMTJxxRYTvejg=
Subject key identifier:   41:58:5D:81:06:99:DA:CD:C4:33:BE:95:00:F5:05:D6:4F:98:28:DF
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584726D08CB3DA733ECD9DE72480
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16417
IP address blocks:        207.54.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8c:b3:da:73:3e:cd:9d:e7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=1d20dec2-6a59-4838-afe0-7af99e655647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:51:dd:ee:7f:38:5d:48:03:d3:ff:c7:18:
                    45:f9:80:a0:c3:71:2a:49:34:61:10:ec:c6:ce:ba:
                    df:71:e5:c0:c9:1c:91:f8:f8:99:02:cd:16:7a:27:
                    a5:61:07:4a:0c:e3:3f:19:a9:4b:8d:42:6e:f1:83:
                    10:94:d0:3d:6d:63:39:93:18:fa:90:30:61:ac:e6:
                    8a:86:2a:4d:0c:a5:ea:ea:e7:e7:06:bf:bb:9e:6a:
                    b2:d6:5b:19:90:30:1b:a1:6c:4c:e9:77:02:43:6c:
                    fe:16:12:53:ea:08:21:91:10:09:d4:e0:0d:5f:a8:
                    7a:16:a9:e5:94:a9:56:89:29:a7:29:f5:6c:23:c7:
                    f1:6d:24:2a:ef:e7:69:39:7e:f8:12:ef:f9:72:1b:
                    76:7f:5b:d8:7a:59:c8:c7:bd:b1:aa:4d:51:7b:5f:
                    f7:cd:ad:c2:97:0f:97:78:10:fc:a2:3a:c3:a0:f7:
                    96:5b:f2:e4:cf:3f:dd:79:5e:69:c0:15:25:9a:0e:
                    c6:99:46:c7:af:5a:55:ce:47:fa:aa:1b:d0:f9:d3:
                    09:9b:6b:a9:78:42:50:6b:e0:6d:c8:1b:84:65:c3:
                    6e:d3:78:b1:9e:98:27:f8:e7:a2:eb:58:01:01:4d:
                    c7:03:c7:f7:09:08:5e:9c:c1:a6:c0:13:b0:e1:e6:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:58:5D:81:06:99:DA:CD:C4:33:BE:95:00:F5:05:D6:4F:98:28:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:f1:12:d1:ff:aa:13:8e:68:9a:7b:c4:20:5a:ba:8a:bc:
         f8:3a:1b:7d:34:37:da:c7:16:2e:0d:ca:94:62:e0:81:36:c0:
         fd:91:f7:38:8b:cb:f4:3f:83:7d:98:bf:f1:5c:26:d8:94:f4:
         75:1f:b3:7a:03:07:ee:60:ac:4d:aa:df:5e:86:7d:a7:11:ca:
         0e:96:c2:20:91:cb:27:0e:7f:cc:ce:45:43:57:91:7a:7e:d0:
         d8:81:37:ec:aa:45:7b:78:c6:bb:10:70:c0:d2:87:5a:84:a5:
         c7:81:0c:04:32:e4:4b:83:39:63:78:7b:98:11:98:33:5e:74:
         ba:b2:57:86:62:b3:2f:ff:a7:42:82:08:9f:16:53:49:75:33:
         78:be:3b:49:c7:6f:6a:46:03:71:0a:f0:33:47:c1:9f:e7:55:
         89:cc:8f:e5:72:3a:28:22:39:b9:8e:c0:a4:45:b0:38:94:dd:
         93:15:95:41:17:8e:06:96:c5:57:a0:cd:b7:b1:fd:60:8e:c3:
         56:97:a6:49:95:fe:43:33:c6:ba:bb:16:b2:fd:fb:33:e8:fa:
         ad:cc:c3:75:d1:cb:e0:3f:aa:ab:7e:0f:b7:ab:99:c9:1a:7b:
         96:a5:91:5b:08:ca:d7:cc:3a:7a:ab:fc:d1:95:56:b6:91:4d:
         20:38:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:05 2024 by rpki-client on console-ams.rpki-client.org