Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
File:                     90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (raw, json)
Hash identifier:          g1xiPYIY8MT6PtO3q+z9OCb4MR6l6jTlue8M5DCKa0Y=
Subject key identifier:   7A:FA:ED:02:31:D2:A7:4B:88:92:49:02:A8:03:68:8D:63:91:49:08
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F43285847C8D9D322FE54100D91A98350
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     8075
IP address blocks:        167.92.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d3:22:fe:54:10:0d:91:a9:83:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=25754986-83b6-4bfd-8e09-56c6af9cfcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:c1:a3:bc:e8:00:4a:66:6e:9c:d0:43:ea:
                    c5:71:0a:1e:78:3e:12:78:01:d3:92:38:e4:5b:1a:
                    e7:41:25:1d:a7:e0:a0:f5:45:76:86:69:39:0b:1d:
                    b6:1d:70:15:ee:4f:60:54:dc:a1:5d:9d:cf:ee:6a:
                    a7:3b:ef:a8:96:ae:18:27:2e:09:86:e5:51:d1:61:
                    4e:b8:07:21:d2:56:fa:e7:b2:b5:b2:4d:a6:94:e3:
                    e4:c4:a2:c4:20:e2:e9:df:78:38:d1:f2:6d:9a:67:
                    87:6a:0d:5f:32:16:89:ad:6a:07:cc:e0:db:8f:79:
                    e0:d1:77:ca:5d:86:20:0d:3f:51:b7:43:c7:05:97:
                    1e:85:bd:2f:22:46:81:c3:31:76:20:b0:44:73:26:
                    ef:ee:20:fa:55:a7:c7:45:64:12:23:d9:bf:5b:51:
                    b1:3f:32:51:c4:11:db:19:3c:54:6b:d2:86:54:11:
                    ef:9d:95:0c:26:c0:a6:17:4f:f1:21:15:fc:ce:59:
                    a3:b5:b4:58:3e:f0:00:15:14:ba:82:f7:f6:28:e6:
                    ff:cd:9c:d2:75:d5:9f:81:0f:b9:ec:79:1e:6b:11:
                    ae:5d:54:16:40:ef:c2:be:9c:96:7f:f2:1c:f4:83:
                    21:fd:4d:8b:09:c3:87:86:67:f2:90:73:ca:22:5d:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FA:ED:02:31:D2:A7:4B:88:92:49:02:A8:03:68:8D:63:91:49:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b2:87:b2:87:4f:d9:92:0e:a4:be:b1:40:19:a2:c1:d8:47:
         6d:a9:cb:79:10:1d:e4:3b:fe:04:de:39:f8:9a:07:1b:19:ab:
         6d:7f:77:f8:81:31:29:43:64:d2:b0:ec:28:ba:82:36:bb:1f:
         2c:e8:03:bb:bf:84:f7:d4:a8:c9:7e:85:90:eb:64:37:64:b7:
         5c:7a:6d:02:85:a0:7d:33:67:b9:13:27:a2:93:34:3c:75:7e:
         63:fa:56:17:b5:e7:0f:89:d1:0e:84:39:d6:2b:aa:02:bd:36:
         dc:f2:26:37:86:3b:a6:33:95:7e:88:46:4a:0d:63:1c:b3:e2:
         b3:7a:3f:3a:9b:9d:2b:3b:2d:19:1f:c4:47:04:27:9e:64:51:
         71:df:06:a2:0f:33:ee:b7:69:c9:dc:d3:3a:dc:a4:53:a5:8d:
         69:46:7a:9a:82:0e:e7:ce:50:c9:d6:f9:9a:9f:41:8c:53:c6:
         bf:63:97:21:93:e4:33:07:c0:9e:05:9a:7b:d4:3c:fa:a2:71:
         70:17:9e:04:94:9a:8d:01:d2:72:d3:21:a4:28:0a:06:d1:90:
         0b:4e:9b:e7:ff:46:db:94:05:db:78:9d:74:a2:fa:dc:83:40:
         45:a1:79:a2:d3:8c:71:d7:4e:09:be:7a:a6:e0:c5:ac:73:8e:
         e1:86:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org