Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa
File:                     ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa (raw, json)
Hash identifier:          TSyuFH3sbIYviYVcyvIHMUR01rwHXfLQwQk6u9w3JAA=
Subject key identifier:   9F:C0:31:79:F7:FE:8C:A3:C8:1F:0D:EF:81:53:88:97:74:B5:AB:6A
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285845DBFE60C47AE050259345E100
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     19795
IP address blocks:        208.95.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:60:c4:7a:e0:50:25:93:45:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=f3a26462-b6cb-48db-bda1-a44f6ec21433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:bb:ad:3c:64:68:57:ef:05:14:a9:f1:f5:
                    0f:c1:d1:27:4a:21:09:91:c3:17:94:f2:b3:b3:d5:
                    3d:cb:4d:5b:56:e8:7e:cb:eb:a6:82:ff:e0:b6:71:
                    bf:36:82:38:aa:3b:41:f6:94:fd:71:47:b2:20:14:
                    4b:95:54:43:99:ba:a2:38:26:d1:45:e7:81:69:36:
                    94:70:2c:06:ef:4b:87:f4:5f:68:4d:24:a7:3a:59:
                    b5:dd:15:25:bc:3f:32:c0:56:a6:ef:d9:6e:cb:45:
                    44:83:2a:bd:79:ad:9d:e2:fb:c6:b5:a8:61:73:09:
                    9b:db:ee:e3:6c:3d:8d:a5:aa:4f:11:f5:ec:f9:fc:
                    7b:fe:62:af:ce:0e:b5:94:f8:87:f1:b4:d4:71:cf:
                    9a:de:a7:2b:2a:a1:a9:a8:93:ba:50:4d:54:0b:ec:
                    21:fd:0a:3c:e1:96:27:32:91:b1:e5:1b:17:b0:8c:
                    12:56:33:34:f3:cd:3f:6e:a9:7d:2a:e3:4c:e8:54:
                    0c:ad:c6:f3:86:79:41:82:c7:42:73:82:33:5d:15:
                    65:b8:18:42:c0:3e:c0:ca:5e:5b:f9:b6:79:08:f0:
                    17:13:84:90:40:37:a8:c5:b4:f6:ee:7c:41:93:67:
                    82:71:0c:11:e1:57:a6:b7:9c:f6:08:b3:57:12:30:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C0:31:79:F7:FE:8C:A3:C8:1F:0D:EF:81:53:88:97:74:B5:AB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:7e:4c:3c:c3:da:12:2a:a5:9e:a2:bf:70:aa:b1:e1:06:
         55:1a:ac:19:68:db:0c:74:e9:eb:b9:1a:f6:1a:c6:4a:92:f7:
         54:c7:53:ec:57:5a:0b:97:5c:3a:ba:29:3f:32:63:2b:4a:c8:
         52:4c:7b:81:30:49:1f:1b:fb:d3:ed:b5:2d:53:6c:3d:1b:4e:
         40:ac:d9:25:69:9a:86:c8:36:18:b2:20:07:9d:f0:c0:43:8e:
         48:08:4b:52:22:b6:4f:a5:f3:33:c1:0a:98:f2:11:d2:40:19:
         e2:cd:0e:09:98:e0:1d:e5:fd:17:88:b9:16:eb:6e:f0:ec:60:
         35:43:34:d8:bf:7a:14:29:5c:99:59:6d:a6:f8:91:7e:e9:2f:
         c1:d8:b8:b1:a7:93:db:72:6f:a3:d9:9c:4c:2c:1b:28:fa:59:
         17:cd:33:7e:8b:58:4f:bc:f3:8b:65:ea:93:85:23:57:b9:cf:
         14:d3:5c:57:6f:f5:32:2e:25:90:ea:2a:f8:d1:97:2a:0c:9a:
         2d:2f:3d:c8:88:cb:96:cc:7c:32:fb:05:2d:f1:4a:9c:47:ce:
         74:03:af:4a:b5:a9:fa:fe:85:6f:59:69:89:4f:e1:9c:37:cb:
         ff:16:0c:09:4f:ff:12:e3:ab:3c:a4:c4:b9:47:cd:c1:d5:f8:
         82:fa:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:16:43 2024 by rpki-client on console-ams.rpki-client.org