Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa
File:                     c61bddb8-a297-3640-9c26-a15815d614a9.roa (raw, json)
Hash identifier:          mVP1gdhfVH9Wz9SEfU33uIHVsUlH0K0bqszmwF3degY=
Subject key identifier:   07:F2:38:E8:F1:C3:CB:E7:8A:CD:3C:68:89:FA:7A:17:E6:50:B3:AB
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F43285847BEF6CE5D119A14BAB5FDC000
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     6456
IP address blocks:        208.90.168.0/22 maxlen: 23
                          208.90.170.0/24 maxlen: 24
                          208.90.171.0/24 maxlen: 24
                          2620:0:cf0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:ce:5d:11:9a:14:ba:b5:fd:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c7c1b80d-58f2-4604-891f-ac2f488210d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:b3:95:1f:a0:98:39:a4:5b:f8:6d:66:14:
                    dc:33:15:cc:92:67:3b:bb:34:bb:c6:cd:cc:6a:e3:
                    41:b1:df:3f:b2:67:2d:b5:54:c3:11:9d:e3:27:06:
                    be:95:6f:f5:d9:52:90:00:0e:d4:9f:ff:a9:09:f7:
                    3d:94:f3:c4:8c:5d:2d:43:c8:0f:48:07:37:cc:e1:
                    84:17:56:42:0f:b1:c8:66:90:1b:10:7d:0b:42:32:
                    06:a8:10:17:55:58:d3:16:a5:98:b3:bc:8b:e7:72:
                    51:b1:fd:5b:7f:f0:55:b1:d8:a8:2d:41:74:36:a0:
                    d7:7e:1c:1f:0b:fb:6f:8a:f4:3d:c8:b8:69:9b:d9:
                    30:55:c1:6d:39:a6:6e:ea:b3:5c:b8:f2:87:c7:d7:
                    7a:f2:49:df:62:39:5a:1b:3f:fb:e3:b6:6f:09:44:
                    a2:32:fc:d1:02:e1:c7:39:a4:e9:1f:21:c5:e9:20:
                    b0:7e:0b:3f:d1:3c:fd:70:47:2d:b1:d3:33:ea:9a:
                    54:6a:02:99:a5:50:d1:ae:90:b8:c0:8b:5b:7a:18:
                    dc:bf:d5:46:cc:c2:95:a0:34:a5:1c:c4:b6:14:9d:
                    9b:73:d3:72:53:20:f1:b5:e5:8d:db:69:6f:c1:56:
                    b2:02:e7:94:17:69:ae:2b:92:f2:2a:91:29:40:f9:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F2:38:E8:F1:C3:CB:E7:8A:CD:3C:68:89:FA:7A:17:E6:50:B3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:21:51:ab:1c:2a:a0:14:c8:2d:06:e5:7b:85:10:1e:f4:
         84:41:eb:31:89:f7:07:a9:70:c8:c9:5a:ce:21:5a:82:20:40:
         5b:90:10:6f:3d:a6:c6:77:d0:6e:37:1f:74:bb:bc:18:c2:0d:
         56:07:7d:19:bf:c0:84:32:d0:73:b4:aa:08:a0:ec:71:82:6a:
         9b:d2:48:a1:42:b0:34:22:0e:1a:d3:14:64:3f:df:84:e3:85:
         bb:0e:44:fe:f0:a8:1f:e9:3f:7b:f6:26:1e:64:30:71:75:cb:
         cf:2d:e2:8e:a3:02:d3:d5:47:63:94:a7:1e:d1:ae:28:79:d9:
         1d:90:88:78:cd:94:3f:6e:37:4e:0a:a9:1e:4a:7e:1d:56:bb:
         09:44:67:92:4e:07:0c:6d:3d:c3:85:e3:a7:43:00:e9:f2:08:
         6f:67:91:ba:b2:e5:3d:e7:dc:60:1f:3f:47:7d:16:3c:aa:c4:
         15:65:24:72:31:10:b6:32:bf:90:82:01:12:7b:dd:8f:da:dd:
         d3:52:3c:f0:9f:24:b4:c4:37:6a:4c:04:ba:39:25:32:90:e8:
         d6:1b:1e:54:d1:10:f7:b6:57:93:b8:28:6f:f4:30:85:c5:d5:
         4f:6d:fd:71:cc:92:9d:e9:a6:54:fc:ff:d1:0b:53:53:94:ac:
         9f:a5:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:32 2024 by rpki-client on console-fra.rpki-client.org