Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
File:                     90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa (raw, json)
Hash identifier:          8Nx11/WOpCAUca1hH3YZ8sfRiP9MHBgsszNSAZlK8IA=
Subject key identifier:   6C:35:DE:BC:BF:F7:90:A5:F3:DA:42:77:6A:36:84:EA:4B:F4:60:27
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F432858474DE600547060912208E6C7C0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     400989
IP address blocks:        192.111.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:00:54:70:60:91:22:08:e6:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=279fdde0-0312-4fa8-9358-21c1cbfb994e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:04:bf:4e:2a:49:0e:78:d7:c0:27:aa:f4:
                    98:1e:8e:4c:b8:d3:b8:e2:0c:40:60:c6:59:2a:96:
                    c9:ce:47:f3:73:19:ef:7b:d5:7a:ba:70:01:94:3e:
                    b1:9e:f3:42:93:e9:a5:56:8e:68:c3:da:74:0f:5b:
                    fa:f3:98:1d:89:01:98:29:fc:0d:94:e5:99:a1:a6:
                    38:6e:df:88:ed:f9:e5:99:00:51:07:8c:1d:6e:ee:
                    27:e2:7b:e4:cd:78:16:ef:37:d1:00:5d:37:a5:90:
                    71:b1:97:53:d9:92:41:fe:1e:6b:6e:51:c9:a7:2d:
                    cc:a6:17:2b:b9:38:2a:65:f7:02:dd:e4:7b:f6:12:
                    d1:7d:e2:a6:e0:17:8d:80:a7:7e:57:6b:44:05:bb:
                    bb:e6:7d:81:55:f2:7a:02:a8:6d:8b:25:91:b1:b5:
                    60:5f:01:c6:84:03:7c:14:82:8e:e0:e1:61:b3:10:
                    0d:e4:2a:73:97:f7:65:a6:79:0a:c0:72:22:95:78:
                    63:7d:6e:dd:6e:72:d0:06:6c:8c:3b:ca:81:cf:90:
                    7a:9a:f1:08:08:2b:63:e3:ed:c4:4e:1d:1c:66:a6:
                    39:fb:5b:df:4b:44:ca:bb:41:e9:d2:c6:de:8a:67:
                    6a:f7:76:b3:c6:5f:5b:fb:86:d6:ca:da:89:55:c2:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:35:DE:BC:BF:F7:90:A5:F3:DA:42:77:6A:36:84:EA:4B:F4:60:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:08:f0:f4:32:24:ec:9a:bc:05:26:5a:6c:fb:9d:21:c2:48:
         f3:b7:8b:ae:e9:aa:de:16:c5:a7:b9:e3:12:bf:92:91:2e:68:
         df:41:9c:63:a5:be:a2:f2:fa:9f:0c:ea:a2:63:16:d8:6f:31:
         db:28:73:9a:6e:18:5b:d0:38:d2:10:4d:21:1d:86:60:74:4c:
         c1:91:3a:4d:57:4a:0d:98:11:21:b1:58:42:4c:ca:90:83:df:
         5d:bc:d0:0a:ce:38:3d:36:22:db:c5:cd:24:ad:ab:1c:c5:e8:
         dc:d0:87:37:be:5c:46:9f:2f:0e:47:00:50:d0:4d:8c:be:e1:
         c1:b3:00:2b:79:29:12:9f:61:44:5d:4b:4c:65:23:74:a7:31:
         17:e7:45:86:6c:83:19:5c:a7:9e:cc:4d:f9:91:b4:63:e4:2f:
         38:c6:9e:a3:a2:8b:12:1d:09:e1:02:6a:84:c2:e4:6a:81:75:
         c3:8f:70:80:08:97:0f:bf:e0:69:70:57:0b:6a:e0:1d:2d:f4:
         60:9b:9f:a5:a0:d6:82:4b:af:32:a4:33:aa:71:6a:7e:8e:a7:
         c7:5f:fe:87:0b:b4:32:8d:e1:03:05:59:40:e8:fe:05:34:7d:
         c0:a1:e5:e5:dc:c9:17:ba:48:e4:ac:6f:fd:9e:4b:8d:01:bc:
         61:45:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:12 2024 by rpki-client on console-ams.rpki-client.org