Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
File:                     e3039b73-c17c-3972-b068-a15a1e8b7670.roa (raw, json)
Hash identifier:          QOnp+YHS/4KTPlqatDqXQIRABm0xOe7IwDSEZhJq2y4=
Subject key identifier:   52:4A:FC:62:B8:B1:3D:1A:7F:9E:A8:5E:6D:CB:A1:83:E6:FE:73:96
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847362B54801B44949C2CEC5980
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        208.127.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:54:80:1b:44:94:9c:2c:ec:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=cac41264-59bb-4fa3-b4a9-589ca1dec4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:8c:5e:a1:1f:66:40:f9:10:d6:d3:eb:00:
                    bc:b7:ab:50:07:5a:88:66:80:a9:98:f9:ae:44:64:
                    0d:5c:86:4c:dd:5b:0b:9e:f9:6b:97:ba:93:55:d7:
                    ce:fd:48:c3:26:8a:a3:79:24:d6:41:a7:2b:6d:ea:
                    f8:36:27:ea:42:5f:08:5e:42:e2:9b:f5:6e:76:45:
                    47:96:7e:9a:c4:1b:3a:ad:8d:94:af:8a:d0:d9:e0:
                    bb:7d:80:09:6f:b1:8c:6f:e3:9d:c6:3e:c7:0f:5a:
                    75:c6:ff:f6:ce:3e:87:8e:63:41:16:7a:64:ec:64:
                    ee:78:ab:72:af:13:83:bd:c1:2a:a1:d6:47:53:b6:
                    82:03:11:39:44:84:2c:7e:62:14:1c:b8:30:35:60:
                    81:fd:ed:14:ed:db:3f:4c:ce:e2:eb:2d:f5:19:36:
                    aa:2d:88:1d:ea:de:1b:d4:36:75:f5:39:81:db:2c:
                    11:3a:24:53:2e:f9:74:d9:a6:25:98:b4:d3:63:d2:
                    5e:b0:5e:cd:12:3f:c4:2d:52:82:d8:f0:14:d0:16:
                    a2:bf:f9:1c:2b:26:78:8e:f6:4a:f9:6e:78:14:75:
                    a5:c9:9f:46:97:6a:e9:0b:3d:ed:08:2b:b1:97:ce:
                    4d:28:25:58:22:95:f2:d7:78:78:16:4c:a1:98:d9:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:FC:62:B8:B1:3D:1A:7F:9E:A8:5E:6D:CB:A1:83:E6:FE:73:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:9a:8b:aa:f5:a1:88:b8:54:3e:1b:c2:20:fa:9f:f5:bc:
         22:03:8b:fc:75:4d:08:0e:23:14:53:b1:77:a3:48:b2:7d:46:
         b9:44:f2:97:ad:fb:69:ed:c8:a0:30:3e:d1:11:98:c3:ed:8e:
         8f:9d:78:1a:aa:1d:ec:28:5c:5f:99:60:f4:ea:ae:f5:44:32:
         df:18:32:4b:5f:2f:70:0d:05:c0:5a:86:24:e2:1b:db:52:1d:
         6e:0d:e4:a2:98:e7:a2:1c:a4:4a:eb:46:63:17:43:2e:37:04:
         f8:37:b0:72:b2:68:50:cc:75:be:40:d4:eb:67:d7:ac:ba:8e:
         0e:d9:25:66:a2:ce:32:ae:dd:b9:e0:11:c9:4d:bb:cf:58:95:
         cf:d3:17:f1:a0:b8:e6:1a:38:e4:42:17:0f:42:cc:15:d6:98:
         af:1c:7c:a1:49:b9:16:6a:bd:f8:b7:38:ba:d2:87:ff:65:b0:
         66:5c:19:df:ad:fe:bb:30:94:a5:68:94:4a:1b:5c:ae:5b:61:
         ca:e8:ea:86:2d:96:e9:06:da:d4:e1:c3:4e:73:0b:78:5b:58:
         49:dd:1a:bb:3e:ef:16:4b:d5:e1:2f:de:e8:07:4f:00:04:6b:
         43:b2:ed:0e:95:88:25:28:5b:df:f9:30:23:97:be:52:49:ae:
         2d:45:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:02:34 2024 by rpki-client on console-ams.rpki-client.org