Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/de4e7d71-77a8-338b-855c-85c859c7ebbc.roa
File:                     de4e7d71-77a8-338b-855c-85c859c7ebbc.roa (raw, json)
Hash identifier:          FLyWm5euIHooQEuE7nmIbiAl7b5MhKcFnX8aS+RoYnY=
Subject key identifier:   B5:C7:40:3D:15:94:A7:15:3C:27:1B:E6:FB:0C:BD:53:44:77:5D:14
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858468F03AF58EEB5A9D206396080
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/de4e7d71-77a8-338b-855c-85c859c7ebbc.roa
Signing time:             Tue 16 Jul 2024 16:01:02 +0000
ROA not before:           Tue 16 Jul 2024 16:01:02 +0000
ROA not after:            Mon 14 Oct 2024 16:01:02 +0000
asID:                     400400
IP address blocks:        209.112.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8f:03:af:58:ee:b5:a9:d2:06:39:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Jul 16 16:01:02 2024 GMT
            Not After : Oct 14 16:01:02 2024 GMT
        Subject: CN=629b7487-a5d4-4718-8190-a1696132d089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:4d:68:e9:ea:35:5f:9b:25:83:ea:2c:5d:
                    d4:5b:f8:c5:04:0e:14:36:3d:4f:8d:48:35:d4:c5:
                    7d:1b:b2:70:05:96:60:1f:2c:8c:87:40:0a:6e:17:
                    39:83:6d:82:0b:9d:aa:29:25:c7:c1:f8:49:b9:fe:
                    1f:3c:0c:42:c0:c3:88:60:03:09:7d:cf:83:b9:30:
                    61:c2:04:97:f8:1c:f2:52:74:4b:81:e8:ca:10:3e:
                    43:16:3f:7a:09:a7:0b:07:93:34:53:bb:69:e7:d1:
                    46:a4:14:fe:c1:73:48:93:d0:36:e8:20:b7:c0:d7:
                    be:48:1a:c1:d5:6d:4b:8a:02:d7:e8:4d:e8:19:ea:
                    f3:28:77:4c:88:8f:91:f3:c5:bc:b1:11:57:06:b5:
                    77:38:a8:f8:77:9b:88:1f:4c:39:32:09:b8:ff:63:
                    1b:8d:3c:80:42:8a:b4:b7:54:7d:0a:fe:c1:01:2a:
                    c6:2f:d3:c4:28:c2:bc:86:2f:0a:1a:52:e2:51:47:
                    40:51:84:5a:da:d0:ab:cc:df:aa:75:0a:e0:96:44:
                    bc:fe:5a:38:8e:3e:84:66:a0:64:18:68:68:1d:22:
                    68:00:ff:40:a0:eb:6a:98:1e:c0:a1:cc:6e:41:21:
                    52:82:96:1c:e8:40:69:72:5c:db:7e:ff:b1:7f:ca:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:40:3D:15:94:A7:15:3C:27:1B:E6:FB:0C:BD:53:44:77:5D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/de4e7d71-77a8-338b-855c-85c859c7ebbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:55:2f:50:76:67:72:fb:51:f2:e4:50:ff:95:93:74:32:
         14:f9:8b:eb:db:32:17:01:c9:42:26:cb:c1:83:39:f2:63:f6:
         cb:f9:92:ff:81:73:0b:e7:76:fa:7b:a6:bc:ef:bc:4b:08:6b:
         16:cb:82:6e:92:f1:b9:4f:fd:d8:a6:51:9f:78:86:73:06:12:
         44:da:e6:84:c6:1e:de:2d:c5:c3:6e:bc:34:8c:1b:d5:cb:ab:
         81:9f:ed:94:6d:0c:fd:ad:43:ce:dd:02:b7:24:87:46:a8:43:
         1f:66:5d:8e:3e:13:24:c7:87:0a:fb:a7:4e:f5:98:84:5c:d3:
         54:5c:22:16:d9:c9:ad:24:8e:81:e3:ba:d4:fa:28:d0:d6:d3:
         a2:76:8f:7d:49:84:b7:38:10:e6:74:ce:80:b2:b5:cc:98:a3:
         4d:c7:92:81:3e:13:84:a3:7b:be:4d:cb:32:90:3a:21:47:62:
         3d:f3:9a:4a:2b:ae:7c:65:e6:c0:1b:a1:06:c6:07:f9:4f:82:
         36:d9:30:a5:ac:25:95:de:a6:46:a2:45:3a:fd:72:cd:cc:4a:
         91:07:b2:bc:76:85:79:c6:bb:b5:a6:d8:91:dc:11:53:b1:ff:
         98:0f:83:22:e0:10:b2:f2:b9:81:56:03:74:33:57:a4:2f:b2:
         2a:13:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:03:51 2024 by rpki-client on console-ams.rpki-client.org