Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File:                     ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier:          AbZuZuV3KcP8Gm1ezR91BiFyvJ5ywGV4lzjHIwKZn4g=
Subject key identifier:   FC:0E:6B:2F:D5:97:C3:CE:16:E9:E2:94:E4:2E:21:88:6C:BF:A4:5B
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285846D30FDAB9FA143D4D762FFE50
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time:             Sat 10 Aug 2024 01:00:28 +0000
ROA not before:           Sat 10 Aug 2024 01:00:28 +0000
ROA not after:            Fri 08 Nov 2024 02:00:28 +0000
asID:                     397518
IP address blocks:        208.109.143.0/24 maxlen: 24
                          208.109.145.0/24 maxlen: 24
                          2603:4:1017::/64 maxlen: 64
                          2603:4:1018::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d3:0f:da:b9:fa:14:3d:4d:76:2f:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 10 01:00:28 2024 GMT
            Not After : Nov  8 02:00:28 2024 GMT
        Subject: CN=e722e206-3d36-41c1-90b2-2943998de9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:29:e9:1e:dc:22:b6:c3:dd:16:5b:6c:4c:
                    b4:6c:55:f8:ae:e5:56:8d:11:b8:54:c0:db:be:ac:
                    e8:ab:4c:0a:c7:e8:87:97:bd:93:bf:98:3b:79:33:
                    55:cf:46:9c:8f:dc:ff:5a:53:db:9e:86:75:b9:39:
                    08:af:3a:66:66:26:29:dc:3e:d0:ad:be:0a:bc:44:
                    3d:62:f8:e3:b1:dd:30:18:a4:9f:3d:3b:be:40:b7:
                    ca:ee:46:4c:de:db:f2:6c:0b:8b:9d:df:5b:f7:3b:
                    12:d9:9a:4d:df:43:d0:ea:a3:1b:90:08:8c:4e:b7:
                    30:f7:d1:0d:5c:55:3a:53:e0:38:1b:9e:0f:c6:03:
                    d7:14:82:22:70:c8:0b:a0:bc:8f:f6:b7:18:ca:29:
                    ff:c2:00:d4:41:9f:fe:b3:1c:3a:f2:ca:d7:fa:f7:
                    9f:dc:7c:de:74:e0:ea:63:0d:d8:48:4f:15:da:33:
                    c5:a1:7d:8e:14:46:61:46:44:76:ec:dd:08:03:63:
                    86:58:60:c8:26:8c:82:86:71:19:16:c0:9d:d4:c3:
                    ea:51:69:13:32:f6:10:16:5d:e3:83:bd:7d:d8:74:
                    0d:d3:09:e5:a8:0f:d3:52:4f:cf:0f:ea:c6:3b:a9:
                    44:86:7f:60:df:00:0d:ec:a3:29:e9:8b:c4:15:b1:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:6B:2F:D5:97:C3:CE:16:E9:E2:94:E4:2E:21:88:6C:BF:A4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.143.0/24
                  208.109.145.0/24
                IPv6:
                  2603:4:1017::/64
                  2603:4:1018::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:69:86:98:1d:49:ee:8f:6e:9e:3a:2c:fd:86:fe:97:c1:
         ab:d4:6b:97:ca:cf:f7:70:38:b1:72:2f:47:8d:1e:cf:72:d1:
         a1:7e:10:9c:a6:2e:1d:79:a5:95:e1:15:dc:3f:34:07:96:47:
         f8:86:e1:90:b4:4e:1e:00:1f:a5:c3:af:bb:6f:20:49:88:39:
         43:00:6a:66:4f:1a:c4:99:8c:ca:94:cf:85:4a:9d:9b:7a:43:
         55:ad:be:71:4a:30:b1:b7:5c:1f:48:5d:9d:96:ea:67:f0:65:
         d5:57:d3:ce:db:90:0f:e4:dc:f1:64:63:ff:29:d1:bd:11:d0:
         38:b1:9e:b2:15:c1:f7:b7:6f:42:ec:88:f2:fb:f8:4c:a2:b1:
         41:72:ca:ca:63:c4:d0:78:6a:89:0d:2a:c6:61:3f:2c:eb:96:
         3a:91:68:6b:62:01:27:4c:06:fa:bc:cf:63:34:6b:d3:49:9d:
         8d:a6:0a:33:f0:7f:19:39:92:56:c0:fe:c2:54:52:5e:77:31:
         f2:ed:c4:74:cb:d9:77:9c:ef:87:7b:04:d5:e0:b5:18:b1:fd:
         15:e9:42:80:ae:77:a9:a8:00:0e:9f:8c:66:ad:ee:af:14:68:
         d3:47:1f:f3:7a:9e:14:e1:fd:91:aa:ec:4b:fb:51:bb:4b:70:
         50:47:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:04:25 2024 by rpki-client on console-ams.rpki-client.org