Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
File:                     ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json)
Hash identifier:          mFbis/39kcnnGAuBStuNU4N+2wpwpue1TOBf0dYoJEc=
Subject key identifier:   C2:BF:44:83:86:29:D4:58:96:29:D5:E1:EA:27:71:0B:9A:79:CF:8F
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F43285845B565A736C707B62BB95E3E00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
Signing time:             Mon 29 Apr 2024 17:12:12 +0000
ROA not before:           Mon 29 Apr 2024 17:12:12 +0000
ROA not after:            Sun 28 Jul 2024 17:12:12 +0000
asID:                     30383
IP address blocks:        198.208.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:65:a7:36:c7:07:b6:2b:b9:5e:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Apr 29 17:12:12 2024 GMT
            Not After : Jul 28 17:12:12 2024 GMT
        Subject: CN=a5aaa2ec-19ec-44e1-ade7-b6068e93f923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:3e:19:45:f1:d7:27:6e:1f:f2:ea:51:7e:
                    05:53:94:1e:4e:9e:d6:09:fb:c3:33:28:cd:07:d5:
                    e8:09:75:2c:74:05:16:8e:b7:28:0a:75:92:8f:fa:
                    c2:bc:bb:a9:a4:9a:56:27:fc:cb:a2:ab:b0:70:31:
                    01:2d:73:79:7b:1b:45:3d:0e:98:20:71:76:c5:2b:
                    37:a3:32:05:72:af:a4:8c:8d:2e:29:ff:76:9c:30:
                    f0:ce:f4:aa:b2:09:c9:13:4e:36:25:52:8f:30:d5:
                    88:54:da:c3:f6:90:52:a1:e0:e7:ff:e2:04:34:ae:
                    50:28:65:07:94:42:a0:0a:bd:93:75:67:2e:d9:b6:
                    f0:6a:14:c7:7c:89:e7:60:93:4a:3e:6e:c1:7e:f7:
                    d7:90:e0:73:a0:ab:90:fc:27:02:57:88:df:2f:50:
                    1d:64:4d:7e:5b:79:48:eb:66:7c:3a:fa:dd:ef:e8:
                    4b:bc:cf:a9:a0:37:f5:af:a5:17:34:e0:6d:6d:12:
                    64:1f:0d:f6:44:06:81:b9:48:7a:93:4a:05:12:89:
                    7e:2c:c6:9a:39:89:e9:8a:dd:bc:6d:b0:c0:a7:2c:
                    a0:9a:07:c2:b4:50:35:04:4a:28:e9:66:7b:c2:fb:
                    fc:4f:70:f9:16:83:bc:0b:1c:b7:59:f0:bb:1b:a4:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:44:83:86:29:D4:58:96:29:D5:E1:EA:27:71:0B:9A:79:CF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4d:70:27:3f:14:33:b1:5b:d6:71:2b:0d:7f:1b:9e:7e:03:
         42:90:0e:4c:e9:84:98:73:48:a4:fe:86:12:a5:aa:23:b5:b1:
         bb:bd:71:f4:5e:29:c4:d5:4e:6d:b6:98:b6:d0:11:b1:a1:5e:
         ae:07:5d:27:f9:8b:7b:3e:c4:15:8b:f5:8b:f4:bd:6d:f0:34:
         63:27:70:ff:5f:2c:ef:e8:e3:2d:7e:b0:15:30:ea:e1:79:8b:
         eb:1f:8d:54:23:e2:8e:04:fa:f1:0d:4f:e0:5b:27:4e:e5:92:
         ca:a8:1b:2c:3c:a0:84:05:54:28:b9:71:e9:33:dc:d8:b0:fd:
         fe:d9:bc:74:d8:67:6e:c4:25:64:fd:eb:21:bf:48:01:62:90:
         5c:52:6b:29:ca:c2:5c:fd:4c:fc:0f:6e:4a:e0:b8:04:dd:ec:
         6c:dd:e0:01:b4:89:d4:df:35:3a:d9:7e:71:3b:6f:8e:7a:a8:
         e4:98:09:07:15:5f:72:f6:93:9a:5f:c2:43:7e:d8:d0:b3:9c:
         c6:04:5e:21:c6:3d:68:2b:82:34:3e:10:fe:a6:4e:16:7a:cc:
         6b:36:a8:59:04:45:82:e6:c6:55:bf:33:7b:26:f3:7e:eb:09:
         06:f9:2e:19:fc:e2:51:51:ca:15:34:a0:e5:ec:4e:c9:e9:7f:
         a4:81:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org