Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
File:                     50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa (raw, json)
Hash identifier:          N2Q1KTzWx6lzFbW1zKGcZtu+CI7VKZ1oCKbqe+1Ef48=
Subject key identifier:   94:51:6A:FB:EC:BB:CF:D6:05:AE:5D:2D:1C:78:AC:77:B5:08:36:DC
Certificate issuer:       /CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
Certificate serial:       010D0C9F43285847AB6C09CB7AA89C3A6F496000
Authority key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        45.95.209.0/24 maxlen: 24
                          141.193.71.0/24 maxlen: 24
                          203.57.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:09:cb:7a:a8:9c:3a:6f:49:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=c406413d-f0d4-4acd-9768-e07c42722c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:12:54:79:23:90:24:fc:09:19:81:d2:da:
                    ad:1f:eb:3c:bb:83:30:fd:fe:3c:48:4d:4b:c8:12:
                    8b:2c:8e:1f:1a:f5:95:97:35:5a:a9:4d:2a:36:64:
                    db:f6:41:a3:07:15:e3:8d:ee:59:ca:74:ec:25:a7:
                    62:92:41:24:fc:38:41:95:75:4e:b9:7f:3a:ec:8e:
                    43:c0:fe:a2:c5:96:e4:02:3d:2d:a5:66:a9:a3:7d:
                    63:e2:70:8d:2a:2d:07:50:b6:3d:eb:98:7d:c5:2c:
                    40:f2:35:84:26:18:ac:c1:57:b1:6b:6f:fd:81:a5:
                    b4:32:fe:e2:1e:00:98:39:28:0b:3c:12:ed:bd:d6:
                    53:a6:fb:b7:a3:39:46:bd:12:0a:f2:80:55:b7:58:
                    95:bc:ee:8f:86:82:7e:16:da:2d:f6:a4:ae:bd:fd:
                    26:3f:89:b4:ec:94:01:c0:9a:82:fd:57:56:98:b3:
                    5e:d5:b1:c3:6f:bd:25:5f:67:e4:fc:7e:27:85:2a:
                    23:24:db:a0:2e:de:a2:9c:2c:f1:c0:4f:2f:72:34:
                    56:e7:07:f8:a4:57:8a:31:ee:0f:43:e2:3e:03:69:
                    07:fe:b2:de:e4:49:96:a6:df:25:ac:2d:39:3b:bf:
                    c5:be:88:da:ec:34:41:c5:11:8d:b6:60:19:74:ee:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:6A:FB:EC:BB:CF:D6:05:AE:5D:2D:1C:78:AC:77:B5:08:36:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl

            X509v3 Authority Key Identifier:
                keyid:E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.209.0/24
                  141.193.71.0/24
                  203.57.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:1a:85:7d:40:25:ae:ae:35:92:d7:5e:78:61:f2:8c:f8:
         b4:c5:3f:8d:fa:a5:c9:8f:44:ba:dc:91:b1:7d:49:83:d6:63:
         af:74:90:d2:09:08:03:8d:eb:a8:78:68:6d:a2:d0:d7:b4:e1:
         db:68:b2:3f:44:5a:92:1a:f0:86:19:05:26:b8:a9:1f:9a:97:
         02:76:98:10:8e:8d:b3:f7:8c:a0:69:a2:18:5a:bb:06:68:88:
         34:cd:9e:07:e9:02:74:b1:a2:fe:ad:27:bb:61:6f:4c:00:85:
         85:70:ad:cb:08:67:a1:cb:49:58:31:50:16:f4:85:b0:d3:e9:
         5c:52:b3:68:d7:9e:f7:3a:aa:42:cb:d9:56:00:a1:64:7a:ad:
         45:e0:e9:e7:2a:17:9a:42:2d:99:2b:6b:27:c5:92:77:7e:1a:
         5d:19:5a:83:91:e1:fb:1f:75:c4:4b:68:a6:89:f0:9f:a8:a1:
         18:69:3f:7e:26:a9:77:5b:74:46:e4:75:21:8d:24:0d:db:17:
         6b:9e:23:ea:f3:1e:98:41:5d:53:50:c2:a0:49:1a:c4:6c:28:
         77:f8:38:96:32:67:5f:57:98:39:29:52:e1:fc:0d:00:cd:18:
         06:1f:ef:ea:b1:39:e2:ca:a3:f3:ca:76:f2:e0:f8:8f:88:65:
         dc:28:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:28 2024 by rpki-client on console-fra.rpki-client.org