Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa
File:                     6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa (raw, json)
Hash identifier:          Ce9lfHqN/ExNORgTIPIU9p8+rynWT1x9m5+HO+FDs/U=
Subject key identifier:   48:9F:43:E0:AC:5D:66:A6:03:05:16:58:3B:5F:68:18:40:04:0E:6F
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F432858474420B958E7A1EF2E235260B8
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     21659
IP address blocks:        142.202.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b9:58:e7:a1:ef:2e:23:52:60:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=e82bd65f-118c-4368-bf9b-0d9654fd7737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:a9:ea:a9:16:da:ac:a2:b9:f3:d0:ce:25:
                    c8:d9:e2:00:03:f6:bd:8f:ba:73:42:c2:11:78:e1:
                    5b:13:0a:c4:f4:7b:94:78:be:94:82:a9:f0:d7:9d:
                    70:82:51:fc:a1:0a:9d:29:25:86:a2:17:dd:ca:db:
                    17:7b:f5:19:b6:7f:6b:61:de:1f:bb:95:be:d9:8f:
                    e5:f3:dc:7a:86:79:8f:ff:8c:02:8f:4e:59:15:48:
                    31:28:6e:ce:50:58:1b:67:e2:88:4b:5f:fe:1b:d1:
                    b7:08:f8:d0:46:91:a6:e9:00:f6:fe:b3:99:51:e4:
                    1a:37:6c:95:74:77:ee:88:31:cf:63:26:16:8d:25:
                    7b:bb:8b:83:82:69:f7:f9:fa:08:bf:ed:6b:2e:3c:
                    4b:35:05:49:cf:57:ce:1b:c8:9e:95:52:fb:dc:9c:
                    1d:1f:af:8d:ab:c3:56:e1:a0:bd:a6:bf:e0:b9:c6:
                    b6:d5:85:c5:9e:64:5a:a5:47:c6:f1:5f:2d:24:96:
                    f8:06:6a:98:6d:f9:90:44:58:28:a1:c1:00:51:2d:
                    15:c8:50:dd:99:c3:41:84:94:db:43:5a:64:f3:44:
                    d6:ab:10:98:85:5e:e9:06:41:e2:63:1d:54:6e:52:
                    1d:db:b5:6f:dc:98:5c:ac:8d:16:55:78:1b:d5:f8:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:43:E0:AC:5D:66:A6:03:05:16:58:3B:5F:68:18:40:04:0E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:3f:ef:f5:0d:49:37:50:06:b1:71:50:cd:e3:31:49:ec:b4:
         1f:a5:58:b8:4b:0b:8d:ba:ad:2e:69:d1:c7:5f:ca:3b:0a:94:
         26:bd:a8:89:fa:0e:35:74:bc:9e:6d:e4:db:ed:b6:c2:a7:2e:
         64:f0:72:c4:58:c0:4b:59:1e:67:0d:e4:dc:59:c8:1c:bd:5f:
         5d:36:79:b5:87:4a:d1:a0:be:f2:b9:a6:7d:f9:be:b2:1c:34:
         08:4d:20:40:4d:08:8d:a9:dd:ed:6d:95:f3:34:a6:b7:eb:c5:
         a8:ed:7a:36:ab:92:26:ea:3e:47:74:08:48:9e:bf:f0:a5:ae:
         b9:94:5b:08:e6:1f:eb:68:a0:85:4f:1b:4b:e3:49:8e:3a:e4:
         a7:0e:f2:a6:1d:9e:82:8d:a4:80:49:c1:d7:2c:5f:f3:be:df:
         cf:cd:da:95:f3:06:7b:21:60:07:aa:7f:28:4d:59:9e:09:86:
         23:46:a7:0d:ea:9e:bc:92:fa:4d:72:f3:1d:a4:96:b5:cc:4c:
         38:59:24:01:c9:c8:4d:2d:31:03:63:0f:f6:68:19:e7:5f:12:
         fb:08:dd:2a:16:b6:52:55:69:a4:95:1e:b8:96:c3:6a:19:a2:
         f3:b0:35:66:6d:da:84:32:95:62:e2:db:83:40:43:ed:24:54:
         8c:ce:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:40 2024 by rpki-client on console-ams.rpki-client.org