Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa
File:                     d35ed989-c58c-3ee6-8c22-a631e116f05b.roa (raw, json)
Hash identifier:          Hh/057hl58nwvheGsea++sF5DnNOuMApXDawBvWe3xs=
Subject key identifier:   2C:79:D7:F4:14:5E:47:20:86:8E:E2:F5:7B:66:69:1A:6E:77:6C:42
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F432858476C9DAD443A5C7AF6C86E3CC0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397004
IP address blocks:        205.157.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ad:44:3a:5c:7a:f6:c8:6e:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ff5891e8-fd8c-466a-9412-a58f541fef03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:bd:6c:60:0b:b6:cc:0c:d7:d3:ea:53:49:
                    6d:0e:50:09:48:22:04:8d:86:06:2b:88:e6:2f:84:
                    e8:4f:f8:d7:4b:f6:a6:02:fa:eb:a1:4a:88:99:74:
                    e6:d4:f2:63:b1:2d:2e:bd:87:d5:f8:59:6f:43:e3:
                    cd:0f:2a:d2:e4:08:c4:9c:1b:fb:d4:d4:4a:14:00:
                    02:02:55:7a:fd:ac:a1:b3:35:85:8b:57:a8:fc:36:
                    14:ec:4d:46:06:7d:69:3a:6d:2f:94:0c:66:83:90:
                    e3:97:19:12:79:e5:1d:38:6d:13:fa:43:38:eb:8a:
                    52:97:ae:d1:95:f1:da:67:cd:a8:22:17:6c:30:28:
                    28:9c:22:02:82:da:d4:6f:07:b8:23:81:eb:0b:a1:
                    69:79:6f:c5:b8:e9:8e:e9:85:68:7e:34:2b:97:8c:
                    5e:e2:62:9c:c8:61:83:ba:69:1a:ed:18:9b:2a:ae:
                    62:43:6d:69:32:00:77:c1:5c:76:d7:03:a0:6b:64:
                    8d:51:75:98:e2:6b:bf:6a:e9:b9:06:34:2c:14:71:
                    a8:e6:e9:4d:c3:78:5d:29:a6:cf:3f:31:35:be:99:
                    61:aa:1d:17:61:d5:6e:6a:56:ab:b0:74:81:37:44:
                    06:49:20:61:00:a8:75:d5:24:0b:07:a6:6d:c9:41:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:D7:F4:14:5E:47:20:86:8E:E2:F5:7B:66:69:1A:6E:77:6C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/d35ed989-c58c-3ee6-8c22-a631e116f05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:f0:75:34:65:bd:58:e7:92:6a:7f:ea:62:06:c6:69:be:
         fe:36:c7:03:32:5e:12:de:e5:ce:80:bc:56:4e:be:50:a6:7e:
         19:bd:76:0d:fc:17:41:11:08:36:9d:f3:f8:56:23:4d:84:04:
         64:74:23:74:22:a5:8d:57:10:63:76:c6:93:50:30:4b:90:6e:
         22:2f:26:6e:cf:9d:56:83:6e:eb:56:15:e2:42:f9:ed:57:d4:
         df:1f:7e:68:2b:f8:c9:3f:f1:40:b3:c9:03:f3:e7:99:43:0b:
         24:0a:23:41:62:ca:15:bf:1a:28:a4:fd:78:5a:c7:72:5a:d9:
         e6:1b:e8:55:21:1b:a0:af:7a:16:76:35:f4:69:cd:c2:68:f9:
         b1:6b:c9:8a:50:44:7c:e9:a0:71:bf:3d:57:6d:60:c7:96:76:
         98:8e:4b:c1:9b:3d:4b:3a:e9:4e:50:c9:78:9f:86:0e:bd:01:
         eb:bc:55:d8:7b:4c:5f:0e:48:19:b2:9f:5d:b3:53:84:49:59:
         79:95:fa:34:7c:cf:62:86:e6:4e:9c:59:a3:15:91:7d:62:85:
         e5:2e:fb:4a:e4:bd:7d:6d:5a:1d:10:cb:ff:62:b9:1f:a8:23:
         38:77:db:7f:05:94:12:56:86:ac:99:f5:6f:2e:20:29:e3:1d:
         8e:cf:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org