Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
File:                     8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa (raw, json)
Hash identifier:          Q8g4omW0mKUM7WaeRjG4EvAGKpf/PSBk7YVgxPO4G2k=
Subject key identifier:   63:5E:A4:2E:FB:7D:55:80:80:FA:9D:EB:F4:9F:FF:90:38:47:36:AE
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285847C775A6180F8F3778410725C0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
Signing time:             Tue 05 Nov 2024 14:02:52 +0000
ROA not before:           Tue 05 Nov 2024 14:02:52 +0000
ROA not after:            Mon 03 Feb 2025 14:02:52 +0000
asID:                     14618
IP address blocks:        108.179.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:75:a6:18:0f:8f:37:78:41:07:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Nov  5 14:02:52 2024 GMT
            Not After : Feb  3 14:02:52 2025 GMT
        Subject: CN=e342cb04-6aea-40ee-9d2e-92d7b0498ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:d9:cf:ac:95:cf:1f:ef:26:03:04:1d:51:
                    36:50:71:5a:d8:ea:6d:7a:bb:42:d6:1d:90:1d:36:
                    50:c6:28:c8:b0:b0:be:1d:66:40:bc:34:47:24:32:
                    94:50:aa:6e:4e:2d:6e:dd:28:3a:82:37:b5:16:b1:
                    a0:0f:50:ef:09:a8:d5:38:98:63:58:5c:13:82:d0:
                    83:aa:a9:53:42:5d:bd:0d:42:b4:8e:23:40:5f:b0:
                    5a:a0:b4:b4:d0:35:77:fe:d1:ee:9e:81:ff:05:de:
                    2f:de:11:76:e2:f9:b8:73:86:5f:ee:69:f0:dd:a2:
                    43:9e:39:ae:cb:46:43:c5:38:0e:9e:d6:0e:b6:6d:
                    20:f8:de:9f:c8:0c:6c:11:24:68:67:a1:e0:ab:af:
                    44:88:ee:e5:28:79:a5:ca:2a:b5:cc:ab:54:a2:c5:
                    ab:65:29:82:40:cd:46:6d:5a:e4:f7:83:d8:93:e5:
                    a3:f9:94:ec:8b:56:32:86:b8:aa:54:da:a9:5b:74:
                    ca:e8:9d:15:88:23:1f:43:6f:ed:93:6a:a1:19:5d:
                    f9:8b:6e:50:29:76:c2:8c:00:a3:32:87:3d:cf:6c:
                    42:91:7f:25:4c:f9:5d:b5:dc:6e:18:27:3e:c2:1a:
                    5e:1a:7f:46:23:15:55:a7:fc:19:ef:71:4e:dc:27:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:A4:2E:FB:7D:55:80:80:FA:9D:EB:F4:9F:FF:90:38:47:36:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:57:39:67:0b:c1:0e:0b:18:3b:42:9f:c1:d6:bc:4a:7c:
         2d:92:a5:80:82:5b:12:4c:8a:12:1a:d6:3d:b7:99:f1:c1:a2:
         b2:bc:4f:cb:30:d0:c2:b7:fb:89:63:c2:9c:c6:a7:76:89:87:
         0c:c1:a3:51:ea:cf:60:1e:32:cc:e2:df:a3:a4:5e:b5:e7:8a:
         0e:0a:8b:83:af:85:48:d7:b2:32:e8:42:0c:83:cd:81:c3:87:
         4e:9f:96:2f:e0:91:19:13:b3:56:3a:00:60:db:ec:d8:84:58:
         35:e8:10:d6:e5:9d:91:1e:c7:d5:5e:88:da:d8:3f:13:b3:b9:
         62:e8:8e:29:2f:5d:03:8b:ba:cf:b1:52:aa:16:fc:c2:3f:eb:
         9f:95:6f:f9:38:a2:d6:65:a3:9d:59:43:fd:da:d4:a1:b6:e9:
         9b:75:d6:11:0c:d5:6d:da:05:34:51:94:cb:78:95:f0:2f:c4:
         72:0b:fd:43:be:ef:05:60:d0:e7:1d:7e:35:f0:5d:c5:84:7b:
         90:6a:a9:a5:43:05:c2:b7:7a:0e:6c:36:48:98:79:1b:8b:87:
         6a:7f:2e:ad:d9:55:3b:19:22:3e:ef:e8:a9:20:75:3b:64:2e:
         20:d2:a8:a9:64:51:a8:df:cb:34:44:d0:14:6b:da:bf:2a:37:
         0e:f3:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:23 2024 by rpki-client on console-ams.rpki-client.org