Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
File:                     3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json)
Hash identifier:          lNNWoTmdoLvILcUzVs+KJcM7H9qswMQKbhL9o/ihWfo=
Subject key identifier:   9A:5D:12:15:44:28:85:C1:59:8F:40:28:78:12:84:E0:B7:90:B7:80
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584765A0DEDBC901906221153300
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14061
IP address blocks:        192.81.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:de:db:c9:01:90:62:21:15:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=0aa65c61-071a-4199-bb14-5ee023a8558f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:e0:75:3c:c1:8f:33:0a:e8:02:36:94:8c:
                    f5:a1:ec:0a:ae:82:64:f2:1f:fe:5f:55:e4:f5:a0:
                    03:38:9e:f8:0a:10:98:78:4a:69:7f:61:13:f0:b4:
                    3d:a4:e1:e7:44:a6:ba:9d:5b:fe:7f:84:09:74:67:
                    b7:ec:dd:b4:13:bc:d5:1b:9a:cc:b3:c8:2f:83:8d:
                    24:54:3c:71:9c:a1:ce:21:ea:2e:22:93:94:8c:6c:
                    21:b0:c9:fe:a7:2b:3a:df:42:58:d6:97:f9:70:66:
                    e4:4f:81:0c:93:a6:aa:9d:ae:df:4f:62:29:a6:90:
                    87:d4:18:f8:9f:aa:dc:b5:b5:b8:47:9b:b0:7b:87:
                    03:20:ff:96:03:36:95:de:b7:68:66:6c:24:72:d6:
                    ba:30:c8:ff:a3:c7:5c:e0:aa:4f:f7:ee:13:7f:14:
                    70:1d:f1:84:9f:13:02:0a:4a:f1:13:24:f1:97:16:
                    65:82:f4:f7:7a:4d:b8:1e:bc:e3:25:cd:58:1c:ef:
                    c0:c2:6b:b5:6d:da:3a:c7:82:4b:08:e3:d9:53:31:
                    8c:a1:9b:d2:7c:6e:d5:0e:80:0d:4f:f6:96:17:09:
                    a3:e0:d6:05:16:ed:e2:a0:b3:c3:02:97:c5:7b:53:
                    d5:2d:9d:b7:31:fe:fc:2d:d0:fd:0d:3a:f7:c7:6f:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5D:12:15:44:28:85:C1:59:8F:40:28:78:12:84:E0:B7:90:B7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:36:f3:06:99:06:09:69:33:9c:7f:fa:8f:39:2e:eb:d9:73:
         47:65:ae:6b:de:b3:93:55:b6:c1:50:4e:8f:88:3c:ac:12:0b:
         8e:fa:b6:d9:f0:59:58:87:5a:9c:63:25:8c:87:a6:39:34:c8:
         96:29:a4:5d:f6:d5:3f:65:5e:5d:f2:4a:12:e1:d2:c5:1f:c1:
         9a:aa:ec:d5:52:23:47:e5:39:45:6a:9e:72:9d:df:25:f3:cb:
         42:20:55:8d:0e:ba:7a:75:59:d3:cd:2d:5f:7f:98:52:77:68:
         28:82:61:4c:08:2e:88:8b:22:f1:43:cd:8e:96:c6:26:bb:4f:
         3a:0f:d0:29:1c:76:dd:8c:2d:3c:3b:dc:dd:29:f4:f8:ec:92:
         12:a5:7d:c6:88:e8:5c:04:24:91:39:fc:b7:33:bb:55:8e:e5:
         02:9d:95:c6:21:7c:4e:df:00:10:41:f9:4a:57:41:0c:a5:7d:
         aa:00:57:83:3b:80:23:0c:2c:36:51:80:7e:e3:27:68:7d:2b:
         a0:c0:36:31:2b:1c:24:3e:7d:ea:65:ff:fe:07:29:2a:a0:e7:
         e8:9e:98:53:32:87:31:f5:07:7c:21:c2:05:48:24:f7:7c:99:
         f5:5e:cb:f1:ec:04:82:99:5a:18:c9:5d:dd:3d:9d:66:23:24:
         fb:fa:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:02 2024 by rpki-client on console-ams.rpki-client.org