Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/502003ff-d8c3-348a-85e6-3777dcf0d395.roa
File:                     502003ff-d8c3-348a-85e6-3777dcf0d395.roa (raw, json)
Hash identifier:          I1OEdOcxWsZIbVnpzjgFRHJKaD4XU+zguKtD1mClZEc=
Subject key identifier:   B9:AD:9D:DB:0F:93:30:FF:8F:78:F2:FF:1D:7D:0A:74:91:DA:4C:11
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F432858474F4B63D07E7187D296863C00
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/502003ff-d8c3-348a-85e6-3777dcf0d395.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     393839
IP address blocks:        208.89.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:63:d0:7e:71:87:d2:96:86:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=0bf4a2a0-b89d-4fed-8d70-fecc59760884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:e7:1c:59:f5:e0:44:21:60:e3:70:4c:af:
                    fd:d9:7a:0f:ca:d4:b9:15:08:64:a8:42:f3:e8:cd:
                    e7:e2:ab:81:7f:d9:5d:63:08:2f:b2:2f:2e:77:53:
                    90:66:af:07:67:1a:20:ed:ec:9c:15:e8:1f:51:97:
                    65:9a:d9:46:c0:bb:32:4d:b4:f1:b1:5c:8b:bd:14:
                    4d:59:98:ea:02:7f:45:ec:21:ef:19:48:5b:0f:46:
                    8a:d8:66:81:21:fe:73:57:6d:09:94:e6:ef:56:24:
                    ad:4e:68:44:f6:10:a3:cb:e4:aa:33:df:8a:1a:6d:
                    83:60:be:56:3d:07:e5:80:a7:1f:81:24:7f:74:9a:
                    dc:a2:0f:1e:f5:73:51:fe:21:db:36:83:a3:66:36:
                    46:2b:05:aa:0b:5a:86:3b:df:3d:d8:f2:7a:1d:59:
                    75:14:be:d3:50:4c:cc:7b:10:b3:3c:5e:56:43:2c:
                    20:e5:16:49:72:28:05:b6:e8:00:65:1c:d5:80:d5:
                    b8:ad:40:f5:b6:e8:9e:57:38:40:34:80:f0:39:86:
                    7b:b3:3d:48:b1:18:d7:1a:e3:67:5e:34:20:63:aa:
                    79:5f:a6:0f:a4:b3:74:43:61:e3:a7:02:f7:9b:ba:
                    46:23:d0:2a:8c:82:e2:5f:3d:f7:55:f6:0b:5b:68:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:9D:DB:0F:93:30:FF:8F:78:F2:FF:1D:7D:0A:74:91:DA:4C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/502003ff-d8c3-348a-85e6-3777dcf0d395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:31:67:aa:e1:1c:d4:69:62:fa:7d:b5:c0:69:68:10:bd:c4:
         a3:fc:3d:3d:8d:67:7a:2e:ea:0e:33:4c:fa:f5:10:46:f1:b6:
         e5:b1:bd:4d:f1:09:40:38:3d:a7:af:a2:b6:d0:51:1b:90:1a:
         b1:33:f8:6c:b6:c0:de:fd:25:38:b1:86:71:05:6e:b2:97:fd:
         3d:ef:6b:36:eb:3d:26:5c:ca:5c:0a:1c:34:db:dd:ec:a6:57:
         ce:b7:e7:47:9b:d8:99:47:b0:fc:da:f1:c2:ce:95:66:0b:69:
         10:96:6f:29:7f:6e:f5:8f:35:ba:49:64:9e:69:09:9b:b9:54:
         4c:3a:55:2b:f6:c8:1d:1b:57:18:25:d0:86:d0:11:30:12:9a:
         f9:cf:b9:5b:4a:02:90:06:69:75:57:72:7a:18:f7:f5:b1:f2:
         52:61:b4:55:e0:5a:23:80:ed:e6:33:ca:b3:38:d7:15:7b:08:
         71:74:a3:4f:13:9d:49:af:6b:da:4d:1e:bb:95:13:e0:58:78:
         f8:c6:1f:d1:52:2a:95:12:af:6e:2c:b0:6e:60:45:fe:ee:c4:
         88:0c:be:4f:37:d9:33:fb:d5:5b:ad:89:e8:70:30:04:d7:ad:
         cd:22:1b:4b:df:0b:7f:f4:52:07:86:58:07:9c:59:cb:29:94:
         ae:17:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:27 2024 by rpki-client on console-ams.rpki-client.org