Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa
File:                     82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa (raw, json)
Hash identifier:          xaKXYJbr9H7B5KrjnoDGkL3N/rknDC26fqGHcVaVrj4=
Subject key identifier:   0F:79:3D:CD:37:22:09:D6:19:D8:E3:90:08:F2:F5:F6:59:2C:8E:07
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F432858479AABEC8D4233E668080CE828
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     23465
IP address blocks:        208.187.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ec:8d:42:33:e6:68:08:0c:e8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=4f7d0c10-ebd8-4b81-8126-6e2f6ef8f5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:98:12:9f:d9:1e:c3:d1:68:bc:69:8f:df:
                    13:52:72:57:1b:4f:61:37:60:47:13:a5:6b:00:31:
                    fa:2a:98:f0:c4:17:a0:6d:2e:d6:44:85:83:b2:36:
                    75:f2:6e:9a:8b:15:c3:21:cd:40:d6:00:d6:58:d4:
                    0d:6e:60:10:da:db:60:0f:9e:2c:42:72:3a:73:54:
                    3b:65:e9:b6:0a:17:86:2b:e6:fa:93:47:e7:33:b8:
                    d0:1a:2f:e0:e0:e4:7a:cc:fa:0f:60:13:f7:8b:a2:
                    76:13:b7:89:dc:24:a3:e8:45:ab:1c:12:71:79:10:
                    c7:37:bb:ac:91:5d:f4:28:90:9f:77:44:aa:cd:28:
                    21:92:3e:99:c1:70:c5:ef:b0:5b:ab:99:16:7f:fc:
                    fd:cb:e4:5c:47:10:ad:9d:46:2c:b9:2c:d1:a6:4a:
                    ae:c7:a0:67:78:b9:6b:0b:1e:49:aa:58:39:9c:b2:
                    1e:fa:80:d8:bd:ce:3b:d4:b3:fd:f2:f3:f1:ec:8c:
                    ca:12:3f:72:22:ad:b6:99:06:74:5b:f6:b7:d4:79:
                    ff:93:34:9e:96:66:d0:a5:ee:64:92:ae:c5:6f:bf:
                    8c:6b:e1:3e:f7:d7:5c:b0:e7:35:e7:9d:fd:b8:37:
                    9c:8a:13:a3:bd:cb:df:17:d7:0e:9c:cf:25:cb:9a:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:3D:CD:37:22:09:D6:19:D8:E3:90:08:F2:F5:F6:59:2C:8E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:78:7a:d9:f3:21:38:1b:72:92:21:e4:f0:54:fd:ae:92:
         8c:96:25:37:b4:8f:6a:31:12:3d:b2:23:64:6e:54:4e:12:0f:
         c3:d1:76:4a:b8:43:e7:ec:21:62:64:4f:55:c7:e1:9c:8e:d4:
         fd:96:aa:ff:b4:4a:ae:ca:19:3e:d0:5f:47:92:0d:2c:bc:f9:
         b3:d2:91:c6:98:d4:11:a7:85:12:8f:e0:2b:a5:7d:84:35:d7:
         75:95:e1:74:0c:9e:7c:55:51:4d:5d:0c:9d:a3:7e:c1:34:5c:
         99:06:d2:ba:f1:16:74:82:dc:51:46:44:6c:0b:4a:d5:b3:7f:
         db:d3:c8:61:04:36:57:74:62:23:99:55:8e:ae:14:f5:28:ff:
         17:38:de:cd:59:1d:10:51:4f:a1:00:e0:74:52:88:08:84:a5:
         96:33:b9:47:d7:36:3c:ff:9a:34:36:89:7a:69:78:c6:3b:f2:
         bb:69:a7:2e:2f:e9:af:90:bc:3a:a0:8b:aa:da:c0:39:fe:d5:
         32:b2:c2:54:56:87:bb:1e:ec:a5:e5:4b:37:8f:4e:18:db:a8:
         f9:f5:bf:d4:d6:6e:a7:88:fa:60:d9:6d:dd:59:76:13:1f:96:
         16:5d:c3:b6:c9:94:2a:b3:32:19:9e:da:d8:32:44:2d:d2:46:
         f7:1e:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:42 2024 by rpki-client on console-fra.rpki-client.org