Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7d30f444-7cb3-39ce-8204-ce633bfc400d.roa
File:                     7d30f444-7cb3-39ce-8204-ce633bfc400d.roa (raw, json)
Hash identifier:          4QnoWSoxKzJd5F9zus1pnWPNi70OR43ekW6fmTvJiS8=
Subject key identifier:   23:BF:07:CE:38:0F:96:13:B3:F7:7E:8F:F5:03:00:FD:ED:0B:89:B5
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858479C112C17AE200A873452D3C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7d30f444-7cb3-39ce-8204-ce633bfc400d.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     3561
IP address blocks:        208.157.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:2c:17:ae:20:0a:87:34:52:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=8f58b74f-88f0-476c-9a8c-28b8c0b6991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:ed:c0:65:31:11:d1:73:ac:d5:80:96:51:
                    ea:d1:29:3d:e9:92:4a:fb:cd:a0:21:78:c6:80:62:
                    6a:54:23:73:2e:e3:47:4d:91:f3:fa:e9:e9:1b:a8:
                    8d:f2:ad:dd:08:57:16:02:20:d3:6d:02:2c:8a:2a:
                    c7:1b:64:f7:95:05:75:11:e1:4e:28:4e:0b:81:04:
                    11:39:80:03:ce:e8:7c:60:0f:df:e0:dd:18:75:b3:
                    59:39:c4:52:3c:49:b2:20:08:88:2c:d7:2e:1c:c8:
                    e0:8d:86:1e:79:34:ea:49:a6:67:a8:68:f2:b7:2f:
                    cd:d5:ed:72:2b:ec:e0:3c:b4:2c:91:fb:05:2a:2d:
                    aa:4b:41:15:9f:a3:87:68:c2:11:a3:8f:c1:85:c9:
                    b8:dd:45:fb:d0:c1:33:d5:33:db:b8:fc:8b:13:b1:
                    7a:15:0d:b7:ba:6a:3c:fc:9f:f5:b4:82:34:27:92:
                    a7:64:7f:c3:5a:71:f4:64:85:a1:22:63:6a:e8:55:
                    81:d9:94:99:2f:cf:a6:df:51:a9:ba:f6:ae:bc:d7:
                    62:c3:14:62:90:e1:d0:00:6a:3f:66:31:aa:e8:76:
                    49:27:8a:19:41:be:89:64:1d:b5:b7:3a:cf:21:76:
                    8d:4d:00:63:5c:46:52:ed:6f:0b:d8:5a:ae:a6:ec:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:07:CE:38:0F:96:13:B3:F7:7E:8F:F5:03:00:FD:ED:0B:89:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7d30f444-7cb3-39ce-8204-ce633bfc400d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.157.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:51:c1:49:d2:2b:d4:2c:b7:e8:3b:fa:2e:22:06:71:20:64:
         76:0f:28:59:c4:dc:6f:7e:4c:63:d8:7d:db:79:d0:43:b2:1c:
         e3:3a:b3:ff:fc:94:e4:7a:da:4a:55:57:7f:f9:18:c3:a6:87:
         58:fb:b8:0b:c4:b6:6f:ef:10:f5:f3:80:2e:c4:ce:40:55:f6:
         2c:5c:90:27:35:87:bf:b9:e3:19:9f:43:07:d3:8a:5d:4c:cb:
         4e:cf:59:33:d7:22:f7:0d:19:a6:90:2f:61:eb:2c:1c:b9:55:
         61:11:78:fa:33:1b:ab:d7:7a:c0:3f:0b:08:ab:b1:24:d5:88:
         d3:33:ca:e0:24:41:81:ba:3b:52:23:cd:de:9c:31:56:20:53:
         82:e0:99:d9:78:67:aa:3f:dc:29:8a:a1:00:11:f4:88:78:d1:
         71:d0:0a:97:8c:fa:1b:5c:e3:00:b9:13:17:f9:15:19:6c:c2:
         1e:74:6b:87:f2:4d:c9:ae:6a:ed:74:25:e7:b8:f2:b5:1c:71:
         97:04:15:ab:9f:c7:0f:67:80:75:93:47:65:21:f4:55:00:89:
         80:69:d1:3f:27:16:40:0a:d1:e2:20:c1:fe:bb:5c:8a:6c:d8:
         49:94:e4:d7:9e:ec:9c:c9:1a:03:fa:05:7e:d1:5b:df:71:d3:
         44:da:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:58 2024 by rpki-client on console-fra.rpki-client.org