Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
File:                     2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json)
Hash identifier:          JGh9w2lTa5nmDz6mwhLDyg5D6o9+lhVRHxjfGBe8V5k=
Subject key identifier:   9C:15:CE:67:FA:49:11:0A:93:FA:EB:A7:03:D7:9C:63:53:C9:0F:82
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285847362B54E35273A8999E72E480
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     12129
IP address blocks:        209.124.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:54:e3:52:73:a8:99:9e:72:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=ceb39e75-47b7-4ba3-905f-3f6b2791ad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:0d:39:77:be:40:cf:77:5b:58:17:fa:c7:
                    49:0f:95:1d:69:d7:00:34:1f:42:f9:6d:2c:c1:3c:
                    06:1f:e7:9a:90:f1:f7:e8:19:8a:01:68:d3:65:3a:
                    af:3b:7e:0d:4c:c6:3e:67:93:b7:38:89:d2:42:6f:
                    65:74:c3:80:2d:d6:3f:03:e7:9a:cf:dd:35:9e:02:
                    a2:dd:0e:04:95:f1:73:23:3b:30:ee:74:75:0b:14:
                    a5:1f:c8:66:12:ca:7a:66:dc:ac:a1:9a:71:31:b3:
                    69:23:e9:46:e7:d9:1e:d2:7c:64:a6:cb:79:d9:38:
                    4d:32:07:f6:14:53:fe:fe:ee:ef:ba:44:84:02:eb:
                    96:ef:d0:0c:29:ed:e2:2a:05:2b:27:7c:84:69:75:
                    14:da:3e:72:bf:96:ad:5d:2d:b0:2a:cf:e9:68:81:
                    69:f4:e9:c8:f5:37:5d:cc:e8:a8:44:a1:8d:e7:b3:
                    52:0c:ed:2d:6e:fb:cc:4d:b6:71:e1:cf:13:a7:78:
                    92:a0:41:f2:3c:38:b7:9a:c3:07:ad:fe:d5:8c:05:
                    71:ce:78:73:a4:61:9f:65:0f:78:36:0b:2c:2e:95:
                    19:82:87:a6:77:71:14:38:5f:fd:2a:5d:16:b7:40:
                    fb:8a:79:d8:4a:f0:35:a2:99:45:53:13:71:d8:a3:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:15:CE:67:FA:49:11:0A:93:FA:EB:A7:03:D7:9C:63:53:C9:0F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:59:fe:8b:e2:61:17:ac:b6:73:10:f9:11:48:37:f9:fd:
         56:8c:18:d3:b7:0d:61:ba:cc:6f:7e:78:99:6b:73:fd:0d:83:
         06:04:ee:0d:12:aa:f8:a0:4b:6a:02:70:d9:c9:62:64:68:79:
         51:15:71:cf:67:5b:b1:fb:9f:14:10:56:94:50:57:de:51:03:
         98:44:0b:92:0b:81:53:96:7f:f3:23:8e:d1:9a:34:36:34:b7:
         48:b5:5d:43:b1:30:47:3d:bc:70:3f:ad:75:1d:40:34:22:e5:
         22:2c:7e:3e:71:15:da:d8:3c:f3:eb:c3:bd:ce:44:7a:97:f5:
         97:31:88:fd:21:c8:fb:a7:c3:09:d6:40:62:ea:e8:5c:3f:cd:
         ec:36:9f:39:b6:97:30:9a:bd:26:e3:02:f8:75:99:ad:2e:3f:
         ee:d6:e5:7f:5e:66:05:89:85:6e:9d:da:0e:c1:d6:7e:92:d3:
         6a:63:56:d8:73:49:89:3d:06:bd:54:f3:dd:2d:9b:0b:bd:a9:
         a7:ba:a9:66:f0:23:30:c4:c3:78:8c:2c:97:23:1f:03:6d:da:
         4c:8f:6a:2e:6e:19:bb:6b:12:93:00:e3:f9:df:5e:9a:1b:bd:
         4e:a1:bd:bf:4b:b2:18:db:5a:db:0a:49:c1:f7:1e:7f:a6:ce:
         be:7d:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:23 2024 by rpki-client on console-ams.rpki-client.org