Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/4a44b05c-5423-3493-93fa-20162c53f6c1.roa
File:                     4a44b05c-5423-3493-93fa-20162c53f6c1.roa (raw, json)
Hash identifier:          I177XCQpHjdaotKxvmgbWwoyO69jicDdDRX9qXsnTRc=
Subject key identifier:   37:D9:33:74:B7:0A:DE:ED:C6:AE:31:87:07:D8:C9:4E:B1:77:24:19
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845B4E8D77C616AAAD4BCB8D780
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/4a44b05c-5423-3493-93fa-20162c53f6c1.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     19224
IP address blocks:        209.124.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d7:7c:61:6a:aa:d4:bc:b8:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=995633dd-d923-4a79-80eb-dc79e8bcaa22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:81:0e:cf:da:29:73:22:0b:03:65:ea:a4:
                    1c:5e:71:93:98:9c:b0:42:56:0e:9c:61:ba:32:a5:
                    80:4a:66:60:5f:16:c3:a4:86:c7:ea:2a:83:c2:f0:
                    78:fd:0a:eb:6d:e2:8b:e0:6d:fe:9d:c8:46:be:ea:
                    cb:bb:a7:ab:44:b7:b7:22:9f:9b:01:37:ee:ff:c5:
                    bd:c4:28:22:47:86:9b:eb:f0:de:6a:51:bf:e9:aa:
                    cb:fa:84:eb:ff:63:71:3f:8a:4f:cc:0f:5d:b5:65:
                    29:93:77:18:62:17:36:46:ad:44:76:88:13:64:cc:
                    cd:f0:d0:c4:96:2d:b7:7b:08:24:1c:6b:0e:9f:be:
                    9c:6d:17:5e:6a:e9:cd:4c:99:23:9d:5d:64:1d:e7:
                    2c:af:02:fc:7c:27:12:5e:54:02:1a:38:36:8c:0c:
                    74:69:5a:7e:87:bc:b3:bc:de:93:a2:18:36:73:68:
                    60:53:eb:51:09:0c:89:0d:f7:85:f9:c8:0d:73:2d:
                    c6:6f:08:b8:45:d4:fc:22:15:a9:e0:7c:36:c3:33:
                    ac:f9:c3:66:13:2e:4a:03:ee:57:74:9a:1a:1e:69:
                    15:a3:e1:03:aa:78:05:82:5e:3a:11:c0:1d:ce:a3:
                    9c:46:63:e9:f3:cd:45:ce:45:50:2d:76:6e:2a:97:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D9:33:74:B7:0A:DE:ED:C6:AE:31:87:07:D8:C9:4E:B1:77:24:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/4a44b05c-5423-3493-93fa-20162c53f6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:27:b8:16:1a:19:6c:27:3b:76:d6:6a:a4:66:26:41:dd:
         20:15:bf:43:4e:b9:78:80:17:98:a0:da:c3:2b:ca:5f:8d:db:
         7e:3e:98:37:4a:ff:0d:61:f7:39:49:b2:fa:22:d3:39:79:a1:
         a9:32:4d:e3:fc:91:f9:d9:9b:1a:a6:f3:1e:33:60:86:82:f5:
         fa:04:14:6b:31:3c:dd:ad:96:d2:b0:24:0d:1b:de:da:9f:1b:
         79:cc:58:7a:a0:a1:bd:81:28:08:8c:e6:7e:07:cc:67:c3:f2:
         97:fb:24:60:27:d7:e1:1d:04:f5:91:59:0d:a1:93:e4:ed:e1:
         88:f7:6e:0f:4e:bc:a3:90:2f:c6:d4:1a:f3:50:99:dd:22:e3:
         b9:f1:67:d7:a1:7c:16:34:56:db:2b:f9:63:36:61:34:ac:24:
         9f:22:40:42:8d:42:a0:a6:67:79:1e:17:c7:d5:40:43:b4:22:
         3a:bc:8a:3a:7e:f8:37:9f:ca:ec:96:13:75:a6:f8:49:cf:9f:
         c4:29:21:3a:42:42:4a:53:56:32:a0:63:8f:83:71:b2:ed:95:
         d6:41:25:78:2b:0a:b9:ad:89:a9:8b:72:f0:e3:44:a3:18:80:
         fa:8a:8c:b1:b4:d8:f3:6b:d1:54:7b:ae:f3:1c:f8:88:74:8b:
         d5:43:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:13:58 2024 by rpki-client on console-fra.rpki-client.org