Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa
File:                     5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa (raw, json)
Hash identifier:          pBwh/bLLQv9rtTkCQvfqdE9r48miSNSnq0wub8qzWNQ=
Subject key identifier:   99:92:7E:A9:2B:0B:8D:47:41:35:CC:34:CA:4C:CE:BA:10:5D:AC:83
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584586D86A77188CC6082A440F40
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        208.89.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6a:77:18:8c:c6:08:2a:44:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=4befbcb1-034a-497b-8bb0-d095a8f21731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:24:df:a6:77:7c:29:8a:01:a1:ee:3a:a3:
                    e2:16:e2:13:37:b6:90:b0:f1:16:22:95:ec:e6:90:
                    9f:00:aa:46:3e:0b:12:2e:05:bc:82:a6:45:f2:fa:
                    5f:a7:21:20:00:d9:db:47:01:0d:45:a5:c4:2f:26:
                    41:2f:3b:f9:f5:07:fa:ea:5d:26:4e:d6:02:3b:3c:
                    26:fa:af:3a:4e:3d:66:ce:2d:ac:d8:d4:53:6c:af:
                    03:5b:c7:18:a6:73:9f:cd:68:51:63:e1:70:76:a3:
                    59:4f:b9:78:d2:80:06:b2:c6:d5:09:23:05:e1:01:
                    ff:63:ba:5a:4e:f2:2f:94:bf:d7:0c:f2:b3:54:f3:
                    b8:e3:91:93:4b:d7:06:c4:bb:20:45:82:a1:71:30:
                    94:56:0b:e9:74:86:ef:e0:ca:c9:0f:da:59:59:51:
                    8f:f1:75:f6:7d:9a:43:0f:0e:4a:66:f6:6b:32:96:
                    6d:eb:aa:b3:64:7e:1a:e5:f1:0b:88:b3:c6:e0:13:
                    31:e4:af:8f:ad:5b:a7:95:62:ed:87:f2:58:09:52:
                    e1:47:e7:23:54:e7:33:a5:7f:9e:4e:e8:0f:cf:31:
                    6b:6c:58:e6:99:6c:3c:2d:8f:e9:27:14:09:cf:cc:
                    f5:ed:07:2c:21:33:37:71:3d:87:de:82:cc:21:c0:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:7E:A9:2B:0B:8D:47:41:35:CC:34:CA:4C:CE:BA:10:5D:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:21:5a:32:50:3b:42:2f:40:ff:8b:f7:bc:d0:2b:ea:5a:1f:
         7a:54:81:a7:8d:bb:ec:76:0c:a3:fb:67:f4:48:7f:15:20:e6:
         5e:1b:6c:e3:fd:cb:94:90:be:2a:6b:b0:99:0d:34:79:c2:44:
         84:2f:69:2b:21:8d:e4:b7:c5:bd:cb:bf:79:ed:9d:05:48:67:
         3a:92:45:42:31:e9:9c:d8:c5:c1:17:b8:f3:71:93:cf:cb:7a:
         dd:93:1e:ed:1f:cf:30:bc:de:99:73:4a:9f:f6:1c:3d:57:4d:
         51:16:ce:53:a9:4e:4e:97:4d:79:a1:ff:c4:ae:91:23:53:4d:
         d1:a0:71:25:6f:da:2f:fe:73:b5:80:1d:96:69:64:df:7c:2e:
         58:4c:d6:66:08:b2:0c:4e:dc:07:ce:48:6b:7e:60:bd:f8:77:
         03:e7:80:eb:a7:80:88:0f:d5:55:bc:5e:9e:e7:61:60:d9:4f:
         c8:ea:40:d0:6b:46:94:94:11:58:71:dc:5b:13:7a:d6:d1:1c:
         cb:99:e3:e9:96:75:34:19:ed:ae:72:cb:d9:f7:92:8b:23:10:
         45:87:74:78:88:78:03:7c:39:7a:06:66:ae:97:6c:6d:50:53:
         73:f8:25:61:fb:34:f1:96:73:27:50:a7:51:bd:75:26:d1:fc:
         86:87:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:49 2024 by rpki-client on console-fra.rpki-client.org