Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa
File:                     9e39e998-69ae-3487-82e5-5922bdecd66c.roa (raw, json)
Hash identifier:          cpD1NrdLEXFNxuUWC5qpGpgG8/KrFOLiZb50AtDrJUs=
Subject key identifier:   E5:C0:71:60:00:ED:E1:BE:1F:D5:59:AA:12:B1:0C:B2:1F:31:2A:9E
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F432858456128638F270722E6E19301E0
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     55247
IP address blocks:        208.82.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:63:8f:27:07:22:e6:e1:93:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=a4524ba9-4ac3-416f-958d-c92e8632b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:82:fe:d0:36:b4:65:b6:77:6d:1a:25:f0:
                    d5:10:d6:6e:f6:65:5c:78:77:8e:7a:bd:55:26:8f:
                    dd:62:6a:7c:3e:15:1f:a4:5c:7e:ed:4f:cc:38:08:
                    67:d1:28:da:a1:8d:f8:ef:d2:3b:df:3a:46:80:46:
                    83:30:05:76:69:ef:e7:0b:70:fb:5a:6d:ac:87:60:
                    ac:5f:1a:a7:28:04:a6:ee:a0:64:2c:54:37:c1:5c:
                    e6:06:05:f5:f4:aa:c0:03:33:f6:70:06:77:a4:24:
                    e9:d6:b5:18:c8:a2:b8:6a:5c:af:d7:23:46:e4:0e:
                    51:a5:30:d6:ff:aa:64:5a:0d:fc:9f:8d:14:a6:07:
                    75:e0:0a:10:1c:58:e9:b8:d0:5d:d4:9b:ba:f0:59:
                    a4:84:b9:a2:db:85:08:54:86:d0:e4:56:7a:ec:e8:
                    14:e1:ac:2a:2c:55:e1:5a:68:b0:f2:08:24:7e:7b:
                    7d:f5:36:10:49:f3:8c:89:86:44:25:76:fa:58:8b:
                    e6:5b:d6:59:48:98:c7:1b:df:ca:bb:db:2f:b6:44:
                    22:90:94:5d:20:a7:11:7e:31:9c:de:b9:15:54:ff:
                    2b:ef:ce:8d:79:f6:71:4e:16:cd:8c:72:f1:03:f9:
                    a0:c7:ed:c1:fb:e7:a8:96:3c:90:ef:f5:c7:bf:d6:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:71:60:00:ED:E1:BE:1F:D5:59:AA:12:B1:0C:B2:1F:31:2A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:bb:ec:7d:26:ce:09:50:b7:fa:c7:31:34:e2:10:df:a3:
         b9:46:d9:8d:47:6f:ba:5d:c6:74:c6:53:ef:42:d1:7b:b4:11:
         77:62:b7:11:b5:00:29:14:1b:0d:46:4b:97:3d:a2:e0:8b:04:
         e2:97:05:80:72:b1:e0:5c:a7:87:cc:39:e7:4b:11:ed:eb:93:
         c3:2f:ec:c9:8c:5d:53:e9:be:d4:4b:a0:55:60:3e:4d:6e:27:
         52:8a:87:cc:3a:9b:17:f1:f8:d9:a2:0e:c8:da:5c:fe:49:2f:
         65:40:cf:8c:7c:c8:26:a6:bb:bf:b4:40:89:8b:cf:79:d2:45:
         ec:47:f3:94:35:39:eb:2c:ab:bf:8c:74:77:ad:4e:f4:32:3f:
         4c:a7:c1:32:09:60:9f:19:5e:f6:a9:33:13:65:c1:b8:0d:80:
         b1:b1:2e:91:8a:53:e0:88:ae:99:5b:18:a5:bd:48:5d:ca:8e:
         ca:18:75:fc:11:23:5a:96:22:96:78:da:38:93:7e:23:73:eb:
         9d:3e:0a:8a:4b:21:94:af:31:15:67:81:06:5b:6b:9f:dd:8c:
         12:cf:19:b7:55:75:46:70:81:84:11:85:f6:7c:66:57:5a:fa:
         f4:39:e6:2e:23:77:dc:9f:fa:4a:14:da:73:69:4d:6c:e7:5e:
         30:39:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:12:50 2024 by rpki-client on console-fra.rpki-client.org