Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/264e315d-760b-31b6-ae85-15cf1fc93a81.roa
File:                     264e315d-760b-31b6-ae85-15cf1fc93a81.roa (raw, json)
Hash identifier:          u4KRcqyAkTciqTi+h79gmtusr6zymsqeqaOlq1hZTEw=
Subject key identifier:   B6:46:94:AC:A4:53:86:31:5D:06:5E:20:11:71:B3:0E:76:21:9F:49
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285847A5D69A82BC7952796B2648E0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/264e315d-760b-31b6-ae85-15cf1fc93a81.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     55293
IP address blocks:        216.234.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:9a:82:bc:79:52:79:6b:26:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=927f0ee2-29b2-4141-a2a3-51a1a140d5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:6e:99:0b:b6:75:fe:80:4f:79:88:95:1e:
                    fd:e8:c3:c5:da:1e:8c:f3:f4:ad:32:9e:5b:9c:dd:
                    47:8e:60:22:29:6b:b9:09:01:a9:b1:ab:37:0f:c5:
                    3c:94:24:e6:a7:65:b7:03:fd:42:14:5d:69:ec:30:
                    9a:87:e6:21:b5:e2:8f:e8:1b:0c:20:98:fa:21:b4:
                    f1:47:72:6d:1a:6a:ae:4d:4b:7c:17:63:97:6f:64:
                    2a:81:03:ea:92:9d:bc:cf:ad:22:c8:7a:4b:14:a4:
                    c1:47:87:38:7d:a0:05:68:07:8f:fa:9a:9f:25:0b:
                    a5:fc:8f:a0:b6:ed:a4:8c:af:de:40:9b:bd:50:8e:
                    68:11:e9:06:b9:e1:c9:a5:81:9b:31:24:d5:ae:27:
                    23:66:5d:22:27:20:5d:0e:7e:27:d8:27:46:74:2a:
                    df:db:3c:96:9a:f0:93:76:3c:e9:fb:7c:4b:69:a0:
                    3b:b5:9c:b5:f3:7b:cc:24:2c:b1:78:34:e1:d3:33:
                    b2:21:60:18:41:f6:56:91:1d:a6:cc:1d:ab:6a:86:
                    0f:81:aa:60:db:b0:25:09:5e:3c:6c:7b:04:50:f9:
                    3c:b1:65:7b:ee:b7:0c:d7:73:45:f1:ca:27:7a:91:
                    ca:2b:84:72:8b:a9:b9:d9:51:73:c6:7d:9c:2a:be:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:94:AC:A4:53:86:31:5D:06:5E:20:11:71:B3:0E:76:21:9F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/264e315d-760b-31b6-ae85-15cf1fc93a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:7d:b4:66:37:e8:47:2f:d9:21:dd:4f:11:74:c1:40:f0:
         83:5b:a3:25:3c:d4:2b:92:65:68:26:d1:eb:f3:5f:2c:cf:b2:
         d5:86:ae:9e:04:10:79:cd:0a:86:19:5d:79:3b:8b:d1:35:0c:
         86:b8:21:e6:d1:d6:0c:53:79:30:46:0c:57:00:38:49:6f:09:
         a2:21:ec:88:84:c1:3d:30:fd:a8:4a:df:36:ea:e3:da:b3:c8:
         fc:4b:ec:9d:0e:e2:d3:72:52:ec:1b:b1:aa:25:4d:ad:af:d5:
         15:0c:e1:1f:c7:46:39:1c:d4:6b:d2:2d:33:36:65:ac:ac:d8:
         49:c3:4a:b4:d0:b4:26:23:b4:f9:fb:7e:af:a2:88:a7:c3:a1:
         8d:b4:91:f2:c8:24:7f:0f:09:8c:30:d3:1f:3f:dc:d0:75:48:
         9b:a5:cd:d4:4b:06:56:d1:f5:8d:7e:e0:b2:de:c7:1e:60:1b:
         db:9c:a5:31:25:a2:27:b9:9f:2a:d7:f2:75:02:c3:08:08:93:
         5b:43:57:57:df:c0:19:45:1d:82:62:85:04:86:1a:4e:48:e0:
         88:c7:66:9a:0f:0d:c5:98:1f:0a:4e:3b:a7:f8:a6:68:b1:ff:
         cc:4a:85:75:55:f6:7b:6f:98:db:51:20:49:73:8a:b7:0a:b4:
         a7:44:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org