Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File:                     23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier:          R7V3AMX6eJFgGPEh7Ifj7hAarj8Qzt16oa0LEKCSZmw=
Subject key identifier:   42:CD:25:C0:05:02:48:0A:8F:06:11:84:E0:32:E9:10:DC:1D:86:DF
Certificate issuer:       /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial:       010D0C9F43285846ABFA4A2E7A14599CBC107080
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time:             Sat 27 Jul 2024 01:00:28 +0000
ROA not before:           Sat 27 Jul 2024 01:00:28 +0000
ROA not after:            Fri 25 Oct 2024 01:00:28 +0000
asID:                     14618
IP address blocks:        209.46.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ab:fa:4a:2e:7a:14:59:9c:bc:10:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
        Validity
            Not Before: Jul 27 01:00:28 2024 GMT
            Not After : Oct 25 01:00:28 2024 GMT
        Subject: CN=cdb0c9f2-e55c-41a9-b8d5-2fca52c224e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:52:42:60:dd:5d:59:83:66:54:d6:b1:b3:
                    29:e7:61:eb:4e:2d:07:40:a1:f1:c0:b1:77:63:1e:
                    cd:cd:fa:3a:07:fa:d7:f4:ef:9b:c0:c5:0c:c4:9a:
                    8c:72:12:64:7d:30:61:71:7e:14:7b:9f:7d:55:83:
                    0b:e9:b4:46:d8:21:ca:8d:0e:11:fc:8e:34:cf:e9:
                    ed:f8:e1:6d:10:20:fa:4c:87:da:e3:5a:c6:0f:cd:
                    9f:f8:d0:f7:ef:25:e7:11:fc:92:6d:c3:1e:ac:8e:
                    d2:38:c6:e5:a8:db:65:54:76:27:83:78:40:24:7a:
                    cc:0a:0d:3d:25:ac:e3:ab:23:09:fa:56:14:37:73:
                    13:57:32:e2:55:59:e0:6d:0e:b4:55:e7:08:3d:fd:
                    82:51:63:4d:d9:36:60:61:a7:bd:d5:4c:0c:1f:54:
                    38:4d:87:37:6e:1e:56:06:77:93:36:28:6a:19:47:
                    18:66:7c:64:b7:4c:7e:dd:76:96:c5:62:01:a8:f0:
                    54:68:f8:43:93:ce:eb:bd:04:18:8d:a8:3f:24:3c:
                    55:1f:ad:c1:28:0a:5a:ba:e5:53:08:ea:18:33:25:
                    e3:61:e0:a3:c7:4a:99:86:28:ec:0f:b7:fb:9b:ea:
                    0d:34:9b:9f:cf:67:7f:9b:b2:3f:c9:9d:3c:20:42:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:25:C0:05:02:48:0A:8F:06:11:84:E0:32:E9:10:DC:1D:86:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl

            X509v3 Authority Key Identifier:
                keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:78:50:b9:e8:a9:f0:b3:d2:3d:b5:78:35:f6:39:63:b5:
         b3:27:59:00:31:de:9d:01:81:ef:e7:96:1a:42:08:47:ff:4e:
         5a:60:bd:43:a9:c2:d7:79:87:15:e1:95:a3:83:06:bd:c4:28:
         4d:f7:99:21:58:4a:59:25:8d:2c:ef:c2:cd:14:90:ba:00:df:
         25:68:7b:c4:46:3a:67:24:dd:fe:41:a9:a5:09:d7:65:69:ea:
         71:34:66:86:92:25:f1:fb:b2:16:03:58:73:bd:46:7e:4b:9a:
         64:7d:1d:cd:f3:d2:af:01:0f:ee:c7:ed:a8:74:57:19:df:63:
         32:de:af:80:36:ab:19:cd:86:9e:84:fc:df:62:24:d6:f2:27:
         e7:dc:fe:48:12:63:86:76:1e:ef:3e:ca:9a:68:4f:d1:d3:a5:
         64:1d:be:d1:0c:82:4b:50:3e:b3:75:b4:79:9f:bd:fd:52:45:
         19:6c:02:03:2e:80:90:ba:bc:7f:ad:cf:f8:1a:ff:91:42:99:
         74:8f:48:d5:3e:37:bd:72:30:56:58:3e:77:7a:59:32:52:69:
         14:1b:7d:ff:0a:14:39:2b:89:0a:82:84:11:1d:df:fe:2d:a4:
         05:02:25:de:eb:83:2d:58:fd:2a:9c:e2:37:54:db:f1:da:c6:
         ca:a7:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:16:22 2024 by rpki-client on console-ams.rpki-client.org