Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa
File:                     a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json)
Hash identifier:          UsbQD6ti6RHlotpCaG913kuDtFlIv/4wowT9F0sgpn4=
Subject key identifier:   29:0A:F1:EA:A5:9C:B1:5E:AA:B9:54:8B:06:9C:60:77:BD:EA:6C:2F
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F43285847924BD78C93D3F70D3EFF51C0
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     46432
IP address blocks:        208.88.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d7:8c:93:d3:f7:0d:3e:ff:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=28fb6f40-6777-4b61-9a22-bdf31471a1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:de:ab:41:48:44:2c:69:f8:64:7b:f3:61:
                    74:af:2a:b5:81:37:98:f3:8c:33:09:6e:a9:8f:9b:
                    79:e8:7a:38:af:c9:4f:e5:dd:fc:4f:86:6d:fd:ae:
                    a1:52:69:7e:c7:3e:98:fa:c5:11:39:bb:9d:6d:55:
                    8c:f3:6e:d1:29:39:eb:0d:b5:13:15:4d:4d:db:d8:
                    3a:d8:a0:a7:11:33:bb:6c:02:58:1a:0c:12:b9:3a:
                    aa:05:53:0a:99:85:f8:a5:6d:8b:6f:db:90:04:a4:
                    d4:f6:32:c6:b0:51:29:63:49:f6:f2:7e:35:48:1d:
                    70:10:92:c7:e5:fe:c4:8b:12:4d:07:6a:fe:8a:60:
                    aa:92:be:09:78:42:a2:0a:81:0f:b4:95:ac:52:ca:
                    ec:5e:af:83:90:52:70:fe:c4:f5:40:da:0c:52:5b:
                    98:ab:c1:f2:94:4a:3f:08:e2:ff:a7:36:21:7e:3a:
                    56:7c:f5:38:4d:c6:2f:cf:db:0b:01:7a:a9:5e:e7:
                    43:01:0d:8b:7b:ec:73:2d:52:7a:7a:c4:15:29:4a:
                    e2:f6:31:9a:bb:d7:ec:d7:fb:93:e9:d8:f6:f9:ac:
                    a8:0f:ff:d5:c8:f7:6b:a1:61:76:1b:ff:63:67:74:
                    d1:ca:eb:cc:3b:f0:73:b3:86:6a:bf:7d:a0:f1:cd:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0A:F1:EA:A5:9C:B1:5E:AA:B9:54:8B:06:9C:60:77:BD:EA:6C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:46:f6:09:7b:3e:de:4b:9f:c9:39:fc:4e:04:a5:77:22:8d:
         63:e1:98:65:a5:28:f6:b9:98:65:39:2c:25:27:fe:d1:67:4f:
         03:55:60:d0:b0:8a:35:69:8c:d1:b9:86:9c:96:7b:13:6a:cf:
         ae:43:91:ff:30:9f:e1:9a:7d:29:dc:77:a8:cd:b0:48:fb:07:
         39:6f:17:40:a0:ff:fd:77:6b:49:bd:f3:af:04:11:8a:19:cc:
         8a:de:f2:ff:be:e1:3b:bc:1e:20:80:61:0b:68:3b:b3:eb:55:
         4c:98:bb:af:38:e5:e8:67:e8:aa:af:7a:3f:be:50:72:80:2e:
         d2:4e:ac:94:8c:3c:27:9b:53:17:fe:8f:01:9c:51:a0:00:fb:
         18:13:51:38:04:97:ca:dc:a1:d7:0d:35:06:49:eb:30:87:40:
         74:a2:a2:65:17:ce:f4:a3:77:15:11:fd:74:d9:fb:bb:48:e5:
         cd:45:fd:47:ab:24:48:88:23:cb:99:c1:a0:b3:f6:59:6b:24:
         d7:9a:84:c2:e8:cb:eb:ed:5c:4c:12:69:e9:96:eb:d6:16:b4:
         42:f2:35:17:b3:3e:67:c9:07:9a:20:ac:89:41:e4:12:5f:95:
         f7:84:57:3b:22:5d:0b:fd:2a:84:f9:f9:29:10:19:4c:b3:22:
         cb:bb:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:26:54 2024 by rpki-client on console-fra.rpki-client.org