Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa
File:                     ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa (raw, json)
Hash identifier:          CC8OScfj6L4t+lCvQg7+PSPFT72XKsC3M1neRBf755E=
Subject key identifier:   91:51:A6:44:31:21:D0:E3:A6:65:77:94:9A:F8:0D:E2:94:FB:6D:AB
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858478CB68663CDE45D09E6849880
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394893
IP address blocks:        209.112.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:86:63:cd:e4:5d:09:e6:84:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=e44295cd-cbe9-458b-a3f1-60cad8bb61d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:8a:ea:c5:67:dc:99:57:ec:d0:65:5d:c1:
                    75:2b:9d:a9:f4:3c:a0:5e:bc:75:ff:3f:52:03:3d:
                    04:d7:9f:0b:58:a2:16:b1:4d:47:b6:85:88:14:79:
                    1c:ba:7f:82:bb:eb:3f:fe:4d:0f:78:b5:6a:3f:fe:
                    c2:57:05:59:d1:8b:ca:a3:cb:70:d2:dd:39:61:92:
                    8e:57:32:8e:16:0b:95:89:46:a6:db:9d:a0:ec:5f:
                    b2:ba:1b:ff:b6:00:28:79:f8:b2:92:f4:19:63:28:
                    76:8f:bd:d5:90:ca:d5:a4:fc:a7:1d:07:ef:3b:62:
                    c2:2a:0a:c5:37:e2:cb:b1:a7:77:86:3b:52:eb:12:
                    fb:4f:84:53:95:7c:ec:92:ed:24:af:32:6b:70:95:
                    6c:3d:93:7d:d6:b8:2f:49:43:0a:ab:35:79:f2:a9:
                    42:c9:af:24:4d:4b:37:e2:27:ca:47:19:1e:cb:b4:
                    3a:07:85:8d:e7:88:cc:9b:fa:c5:e6:bd:61:f4:c7:
                    8f:6c:0f:91:d5:0f:75:80:46:c4:64:a3:33:c0:34:
                    05:9e:b8:77:b9:ef:b1:11:53:d8:5f:58:60:37:97:
                    74:cb:03:d0:dc:54:87:9e:bd:a7:b0:69:36:9f:e1:
                    eb:8a:03:95:11:ec:e7:fd:71:2c:df:d6:9f:82:a0:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:A6:44:31:21:D0:E3:A6:65:77:94:9A:F8:0D:E2:94:FB:6D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c8:c8:0d:0f:77:ff:e6:cb:d0:0f:56:68:00:b1:5a:93:c7:
         b0:03:31:2c:70:9e:ca:0a:25:82:e4:bc:91:90:cf:0a:cb:3d:
         64:46:47:4f:b0:ae:ae:05:e1:87:a6:fd:69:b6:83:da:f3:94:
         ad:6b:fa:d8:9c:d2:f8:b1:d1:22:72:50:74:70:bb:1f:51:6d:
         1f:a9:12:95:11:e1:35:5b:68:41:be:24:6e:19:4b:e5:bb:61:
         33:ec:f1:90:96:f4:1d:72:53:3e:69:95:b6:a7:94:9f:8d:42:
         45:03:4c:df:d8:81:73:8a:66:1f:9f:04:3d:32:ab:33:8a:d1:
         83:24:3c:eb:9f:11:07:fe:09:bb:41:e0:44:75:db:f7:4b:ae:
         72:f3:31:b9:fc:33:03:e5:20:8d:cc:36:26:e0:dd:46:0e:bd:
         16:7b:7c:a0:c4:c1:05:60:d3:d5:8f:9f:96:3d:85:01:28:d1:
         11:76:95:c5:ba:98:0f:3f:a4:f1:aa:cf:3b:21:c3:18:0e:ec:
         ac:7a:02:1f:5c:7c:58:0b:33:4e:6c:48:7e:c0:05:51:b3:08:
         28:37:30:02:8a:f1:76:4c:03:3e:af:87:2b:b9:f2:24:7f:c4:
         91:4b:bb:3e:4a:5d:91:b1:e1:17:5c:24:c5:7e:3c:a8:c5:94:
         2a:4c:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:47:01 2024 by rpki-client on console-fra.rpki-client.org